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CHAPTER OVERVIEW 


1: Preliminaries 


A certain amount of mathematical maturity is necessary to find and study applications of abstract algebra. A basic knowledge of set 
theory, mathematical induction, equivalence relations, and matrices is a must. Even more important is the ability to read and 
understand mathematical proofs. In this chapter we will outline the background needed for a course in abstract algebra. 

1.1: A Short Note on Proofs 

1.2: Sets and Equivalence Relations 

1.3: Reading Questions 

1.4: Exercises 

1.5: References and Suggested Readings 

1.6: Sage 

1.7: Sage Exercises 


This page titled 1: Preliminaries is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or curated by 
Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the LibreTexts 
platform; a detailed edit history is available upon request. 
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1.1: A Short Note on Proofs 


Abstract mathematics is different from other sciences. In laboratory sciences such as chemistry and physics, scientists perform 
experiments to discover new principles and verify theories. Although mathematics is often motivated by physical experimentation 
or by computer simulations, it is made rigorous through the use of logical arguments. In studying abstract mathematics, we take 
what is called an axiomatic approach; that is, we take a collection of objects S and assume some rules about their structure. These 
rules are called axioms. Using the axioms for S, we wish to derive other information about S by using logical arguments. We 
require that our axioms be consistent; that is, they should not contradict one another. We also demand that there not be too many 
axioms. If a system of axioms is too restrictive, there will be few examples of the mathematical structure. 


A statement in logic or mathematics is an assertion that is either true or false. Consider the following examples: 


e 34+56—1348/2. 

e All cats are black. 

e 24+3=5. 

e 2x =6 exactly when z = 4. 

e Ifar?+bx+c=0 anda<Q0, then 


—b+ Vb? —4ac 


e 3 —Ax? +52 —-6. 
All but the first and last examples are statements, and must be either true or false. 


A mathematical proof is nothing more than a convincing argument about the accuracy of a statement. Such an argument should 
contain enough detail to convince the audience; for instance, we can see that the statement “22 = 6 exactly when z = 4” is false 
by evaluating 2-4 and noting that 6 ¢ 8, an argument that would satisfy anyone. Of course, audiences may vary widely: proofs 
can be addressed to another student, to a professor, or to the reader of a text. If more detail than needed is presented in the proof, 
then the explanation will be either long-winded or poorly written. If too much detail is omitted, then the proof may not be 
convincing. Again it is important to keep the audience in mind. High school students require much more detail than do graduate 
students. A good rule of thumb for an argument in an introductory abstract algebra course is that it should be written to convince 
one's peers, whether those peers be other students or other readers of the text. 


Let us examine different types of statements. A statement could be as simple as “10/5 = 2;” however, mathematicians are usually 
interested in more complex statements such as “If p, then g,” where p and q are both statements. If certain statements are known or 
assumed to be true, we wish to know what we can say about other statements. Here p is called the hypothesis and q is known as the 
conclusion. Consider the following statement: If ax? +bz-+c=0 anda¥<0, then 


—b+ V b? —Aac 


2a 


St 


The hypothesis is az? + ba +c=0 anda #0; the conclusion is 


—b+./b? —4ac 


2a 


— 


Notice that the statement says nothing about whether or not the hypothesis is true. However, if this entire statement is true and we 
can show that az? +bz+c—=0 witha +0 is true, then the conclusion must be true. A proof of this statement might simply be a 
series of equations: 
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az’ +bx +c =0 


b +4/ b? — 4ac 
= 2a ~ 2a 
Orv b2 —A4Aac 
— 2a ; 


If we can prove a statement true, then that statement is called a proposition. A proposition of major importance is called a theorem. 
Sometimes instead of proving a theorem or proposition all at once, we break the proof down into modules; that is, we prove several 
supporting propositions, which are called lemmas, and use the results of these propositions to prove the main result. If we can 
prove a proposition or a theorem, we will often, with very little effort, be able to derive other related propositions called 
corollaries. 


Some Cautions and Suggestions 


There are several different strategies for proving propositions. In addition to using different methods of proof, students often make 
some common mistakes when they are first learning how to prove theorems. To aid students who are studying abstract mathematics 
for the first time, we list here some of the difficulties that they may encounter and some of the strategies of proof available to them. 
It is a good idea to keep referring back to this list as a reminder. (Other techniques of proof will become apparent throughout this 
chapter and the remainder of the text.) 


e A theorem cannot be proved by example; however, the standard way to show that a statement is not a theorem is to provide a 
counterexample. 

e Quantifiers are important. Words and phrases such as only, for all, for every, and for some possess different meanings. 

e Never assume any hypothesis that is not explicitly stated in the theorem. You cannot take things for granted. 

e Suppose you wish to show that an object exists and is unique. First show that there actually is such an object. To show that it is 
unique, assume that there are two such objects, say r and s, and then show that r = s. 

e Sometimes it is easier to prove the contrapositive of a statement. Proving the statement “If p, then qg” is exactly the same as 
proving the statement “If not qg, then not p.” 

e Although it is usually better to find a direct proof of a theorem, this task can sometimes be difficult. It may be easier to assume 
that the theorem that you are trying to prove is false, and to hope that in the course of your argument you are forced to make 
some statement that cannot possibly be true. 


Remember that one of the main objectives of higher mathematics is proving theorems. Theorems are tools that make new and 
productive applications of mathematics possible. We use examples to give insight into existing theorems and to foster intuitions as 
to what new theorems might be true. Applications, examples, and proofs are tightly interconnected—much more so than they may 
seem at first appearance. 


This page titled 1.1: A Short Note on Proofs is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or 
curated by Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the 
LibreTexts platform; a detailed edit history is available upon request. 


GNU Free Documentation License https ://math.libretexts.org/@go/page/81022 


Oibretexts: 


1.2: Sets and Equivalence Relations 


Set Theory 


A set is a well-defined collection of objects; that is, it is defined in such a manner that we can determine for any given object x 
whether or not z belongs to the set. The objects that belong to a set are called its elements or members. We will denote sets by 
capital letters, such as A or X; if a is an element of the set A, we write a € A. 


A set is usually specified either by listing all of its elements inside a pair of braces or by stating the property that determines 
whether or not an object x belongs to the set. We might write 


X = {21,%,.--,2n} 
for a set containing elements 21, %2,..., Lp OF 
X ={x: a satisfies P} 


if each x in X satisfies a certain property P. For example, if & is the set of even positive integers, we can describe & by writing 
either 


E={2,4,6,...} or H={x:xzisaneveninteger and x > 0}. 
We write 2 © F when we want to say that 2 is in the set F, and —3 ¢ F to say that —3 is not in the set F. 
Some of the more important sets that we will consider are the following: 


N = {n: nisa natural number} = {1, 2,3,...}; 
Z={n:nisaninteger} = {...,—1,0,1,2,...}; 
Q={r:risa rational number} = {p/q: p,q € Z where q £0}; 
R={2: a isa real number}; 

C = {z: zis a complex number}. 


We can find various relations between sets as well as perform operations on sets. A set A is a subset of B, written ACB or 
BDA, if every element of A is also an element of B. For example, 


{4,5,8} c {2, 3, 4,5, 6,7, 8,9} 
and 
NCZCQCRCC. 


Trivially, every set is a subset of itself. A set B is a proper subset of aset A if BC A but BAA. If A is not a subset of B, we 
write A ¢B; for example, {4,7,9} Z {2, 4,5, 8,9}.Two sets are equal, written A=B, if we can show that AC B and 
BCA. 


It is convenient to have a set with no elements in it. This set is called the empty set and is denoted by @. Note that the empty set is a 
subset of every set. 


To construct new sets out of old sets, we can perform certain operations: the union AU B of two sets A and B is defined as 
AUB={«:x2¢€ Aorze B}; 
the intersection of A and B is defined by 
ANB={«:x2¢€ Aandz ec B}. 
If A= {1, 3,5} and B= {1, 2,3, 9}, then 
AUB=({1,2,3,5,9} and ANB= {1,3}. 


We can consider the union and the intersection of more than two sets. In this case we write 


U4: = AiU...UAy 


i=1 
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and 
n 
()4i =410...9 An 
i=1 

for the union and intersection, respectively, of the sets A,,..., An. 


When two sets have no elements in common, they are said to be disjoint; for example, if & is the set of even integers and O is the 
set of odd integers, then F and O are disjoint. Two sets A and B are disjoint exactly when AN B= 9@. 


Sometimes we will work within one fixed set U, called the universal set. For any set A C U, we define the complement of A, 
denoted by A’, to be the set 


A’ ={x:2 €Uandz ¢ A}. 
We define the difference of two sets A and B to be 


A\B=ANB ={a:2€ Aandz ¢ B}. 


Let R be the universal set and suppose that 


A={xeER:0<2<3} and B={xeER:2<2<4}. 


Solution 


Then 


ANB ={#€R:2<2 <3} 
AUB ={xER:0<2 <4} 
A\B ={t@ER:0<2<2} 

A ={rER:2<0orz> 3}. 


& Proposition 1.2 


Let A, B, and C be sets. Then 

1.4UA=A, ANA=A, and A\ A=9; 

2. AU@=A and ANO=90; 

3. AU(BUC) =(AUB)UC and AN(BNC) =(ANB)NC; 
4.AUB=BUA and ANB=BNA; 

5. AU(BNC) =(AUB)N (AUC); 

6. AN(BUC) =(ANB)U(ANC). 


Proof 
We will prove (1) and (3) and leave the remaining results to be proven in the exercises. 
(1) Observe that 
AUA ={a:x2€Aorze A} 


={ax:a€ A} 
= 


and 


ANA ={a:x2¢€ Aandz ec A} 
={x:2€ A} 
=/\, 


Also, A\ A= ANA'=9. 
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(3) For sets A, B, and C, 


AU(BUC) =AU{«a:2€ Borze C} 
={a:x2¢€Aorze B, orx eC} 
={«:2¢€Aorxe B}UC 
=(AUB)UC. 


A similar argument proves that AN (BNC) =(ANB)NC. 


& Theorem 1.3. De Morgan's Laws 


Let A and B be sets. Then 
1.(AUB)'=A'NB; 
2.(AN BY = A'UB’. 

Proof 


(1) If AU B=9, then the theorem follows immediately since both A and B are the empty set. Otherwise, we must 
show that (AU B)'’ C A'’N BB’ and (AUB) D> A'NB’. Let x € (AUB). Thenz ¢ AUB. So z is neither in A 
nor in B, by the definition of the union of sets. By the definition of the complement, x € A’ and x € B’. Therefore, 
z € A’ B' and we have (AUB)' c A'NB’. 


To show the reverse inclusion, suppose that x € A’ B’. Thenz € A’ andz € B’, andsoz ¢ A andz ¢ B. Thus 
z € AUB andsox € (AUB)’. Hence, (AUB)! 5 A’ B’ andso (AUB)! =A'NB’. 


The proof of (2) is left as an exercise. 


vY Example 1.4 


Other relations between sets often hold true. For example, 
(A\ B)N(B\ A) =9. 
Solution 
To see that this is true, observe that 
(A\ B)N(B\ A) =(ANB)N(Bn A’) 


=ANA'NBNB’ 
=¢. 


Cartesian Products and Mappings 


Given sets A and B, we can define a new set A x B, called the Cartesian product of A and B, as a set of ordered pairs. That is, 


Ax B={(a,b):a¢ Aandbe B}. 


If A= {z,y}, B= {1, 2,3}, andC =9, 
Solution 
then A x B is the set 
{(x,1), (x, 2), (x, 3), (y,1), (y, 2), (y, 3)} 


and 


AxC=9@. 
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We define the Cartesian product of n sets to be 
Ay X+++X An = {(@1,---, Qn): a; € A; fori =1,...,n}. 


If A= A, = Ap =---=A,, we often write A” for A x--- x A (where A would be written n times). For example, the set R? 
consists of all of 3-tuples of real numbers. 


Subsets of A x B are called relations. We will define a mapping or function f C Ax B froma set A to a set B to be the special 
type of relation where each element a € A has a unique element b € B such that (a, b) € f. Another way of saying this is that for 


every element in A, f assigns a unique element in B. We usually write f: A— B or A as B. Instead of writing down ordered 
pairs (a,b) € Ax B, we write f(a) =b or f:at+b. The set A is called the domain of f and 


f(A) ={f(a):ac A} CB 


is called the range or image of f. We can think of the elements in the function's domain as input values and the elements in the 
function's range as output values. 


vY Example 1.6 


Suppose A = {1, 2,3} and B= {a,b,c}. 


Solution 


In Figure 1.7 we define relations f and g from A to B. The relation f is a mapping, but g is not because 1 € A is not assigned 
to a unique element in B; that is, g(1) =a and g(1) =b. 
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A B 


Figure 1.7. Mappings and relations 


Given a function f : A + B, it is often possible to write a list describing what the function does to each specific element in the 
domain. However, not all functions can be described in this manner. For example, the function f : R— R that sends each real 
number to its cube is a mapping that must be described by writing f(z) =x? or f: rz 2°. 


Consider the relation f : Q — Z given by f(p/q) =p. We know that 1/2 = 2/4, but is f(1/2) =1 or 2? This relation cannot be 
a mapping because it is not well-defined. A relation is well-defined if each element in the domain is assigned to a unique element in 
the range. 


If f: AB is a map and the image of f is B, i.e., f(A) = B, then f is said to be onto or surjective. In other words, if there 
exists an a€ A for each b€ B such that f(a) =b, then f is onto. A map is one-to-one or injective if a, Aa2 implies 
f (a1) # f(az). Equivalently, a function is one-to-one if f(a) = f (a2) implies ay = a2. A map that is both one-to-one and onto 
is called bijective. 
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wv Example 1.8 


Let f :Z— Q be defined by f(n) =n/1. 
Solution 


Then f is one-to-one but not onto. Define g: Q— Z by g(p/q) =p where p/q is a rational number expressed in its lowest 
terms with a positive denominator. The function g is onto but not one-to-one. 


Given two functions, we can construct a new function by using the range of the first function as the domain of the second function. 
Let f: A+B and g:B-+C be mappings. Define a new map, the composition of f and g from A to C, by 


(9° f(x) = 9 f(z). 


Figure 1.9. Composition of maps 


vY Example 1.10 


Consider the functions f : A— B andg: B—C that are defined in Figure 1.9 (top). 
Solution 


The composition of these functions, go f : A + C, is defined in Figure 1.9 (bottom). 


Let f(x) = 2? and g(x) = 22 +5. 
Solution 


Then 


(f0g)(x) = f(g(x)) = (2a +5)” = 4a? + 202 4+ 25 
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and 


(go f)(x) =9(f(x)) = 22? +5. 


In general, order makes a difference; that is, in most cases fog# go f. 


Sometimes it is the case that fog=gof. Let f(x) =2° and g(x) = \/a. 
Solution 


Then 


(fog)(x) = f(g) = fe) =(W2)? =2 


and 


(go f)(2) = 9(f(2)) = 9(2*) = Va" =a. 


Given a2 x 2 matrix 


Solution 
we can define a map 7’, : Re SR by 
Ta(z, y) = (ax + by, cx +dy) 


for (x, y) in R?. This is actually matrix multiplication; that is, 


GAGs: 


Maps from IR” to R™ given by matrices are called linear maps or linear transformations. 


YW Example 1.14 


Suppose that S = {1,2,3}. Define a map 7: S > S by 


Solution 


This is a bijective map. An alternative way to write 7 is 


Ga x) “alate 3) 


For any set S, a one-to-one and onto mapping 7 : S > S' is called a permutation of S. 


& Theorem 1.15 


Let f: A> B, g: BC, andh: CD. Then 


1. The composition of mappings is associative; that is, (ho g)o f =ho(go f); 
2. If f and g are both one-to-one, then the mapping go f is one-to-one; 

3. If f and g are both onto, then the mapping go f is onto; 

4. If f and g are bijective, then so is go f. 
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Proof 
We will prove (1) and (3). Part (2) is left as an exercise. Part (4) follows directly from (2) and (3). 


(1) We must show that 
o(gof)=(hog)of. 
For a € A we have 


(ho (go f))(a) =h((g° f)(a)) 
=h(9(f(@))) 
= (ho g)(f(a)) 
= ((hog)o f)(a). 
(3) Assume that f and g are both onto functions. Given c € C’, we must show that there exists an a € A such that 
(go f)(a) = 9(f(a)) =c. However, since g is onto, there is an element b € B such that g(b) = c. Similarly, there is an 
a € A such that f(a) = 6. Accordingly, 


(9° f)(a) =9(f(@)) =9(b) =e. 
If S is any set, we will use idg or id to denote the identity mapping from S to itself. Define this map by id(s) =s foralls eS. A 


map g: B— A is an inverse mapping of f : A— B if go f =id, and fog =Zidzg; in other words, the inverse function of a 
function simply “undoes” the function. A map is said to be invertible if it has an inverse. We usually write f+ for the inverse of f. 


vY Example 1.16 


The function f(z) = x° has inverse f~!(x) = °/x by Example 1.12. 


The natural logarithm and the exponential functions, f(a) =Inz and f~!(x) =e, are inverses of each other provided that 
we are careful about choosing domains. 


Solution 


Observe that 


and 
i" (f(e)) =f" (nz) =e™* =e 


whenever composition makes sense. 


vY Example 1.18 


Suppose that 


Solution 
Then A defines a map from R? to R? by 
Ta(z, y) = (3 TY; 5a +2y). 


We can find an inverse map of T', by simply inverting the matrix A; that is, die = T,... In this example, 


aa(? = 
a ee 
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hence, the inverse map is given by 
De (x,y) = (22 —y, —5x + 3y). 
It is easy to check that 
Te oTAG,y)—Tact; (2,0) =(e,¥)- 
Not every map has an inverse. If we consider the map 


Ta(z,y) = (32,0) 


given by the matrix 


then an inverse map would have to be of the form 
Tz '(z, y) = (ax + by, ca + dy) 
and 
(x,y) =TpoT;' (x,y) = (az + 3by, 0) 


for all x and y. Clearly this is impossible because y might not be 0. 


Y Example 1.19 


Given the permutation 
23 
— 
Pe sy dl 
on S = {1, 2,3}, it is easy to see that the permutation defined by 


Se tf ees 
a = 
ce 


is the inverse of 7. In fact, any bijective mapping possesses an inverse, as we will see in the next theorem. 


Solution 


& Theorem 1.20 


A mapping is invertible if and only if it is both one-to-one and onto. 


Proof 


Suppose first that f: A> B is invertible with inverse g: B— A. Then go f=id, is the identity map; that is, 
9(f(a)) =a. If a1,a2 € A with f(a) = f(a2), then a1 =g(f(a1)) = 9(f(a2)) =a2. Consequently, f is one-to-one. 
Now suppose that b € B. To show that f is onto, it is necessary to find ana € A such that f(a) =b, but f(g(b)) =6 with 
g(b) € A. Let a = g(b). 


Conversely, let f be bijective and let b € B. Since f is onto, there exists ana € A such that f(a) =b. Because f is one- 
to-one, a must be unique. Define g by letting g(b) = a. We have now constructed the inverse of f. 


Equivalence Relations and Partitions 


A fundamental notion in mathematics is that of equality. We can generalize equality with equivalence relations and equivalence 
classes. An equivalence relation on a set X is arelation R C X x X such that 


e (z,x) € R forall x € X (reflexive property); 
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e (x,y) € R implies (y, 2) € R (symmetric property); 

e (x, y)and (y, z) € R imply (z, z) € R (transitive property). 

Given an equivalence relation R ona set X, we usually write z ~ y instead of (x, y) € R. If the equivalence relation already has 
an associated notation such as = , =, or =, we will use that notation. 


Let p, q, r, and s be integers, where q and s are nonzero. Define p/q ~~ r/s if ps = qr. 
Solution 


Clearly ~ is reflexive and symmetric. To show that it is also transitive, suppose that p/q~r/sandr/s ~t/u, with gq, s, and 
u all nonzero. Then ps = gr and ru = st. Therefore, 


psu = qru = qst. 


Since s £0, pu = qt. Consequently, p/q ~~ t/u. 


Suppose that f and g are differentiable functions on IR. We can define an equivalence relation on such functions by letting 
f(z) ~ g(a) if f'(x) =9'(@). 
Solution 


It is clear that ~ is both reflexive and symmetric. To demonstrate transitivity, suppose that f(x) ~ g(x) and g(x) ~ h(z). 
From calculus we know that f(z) — g(a) =c, and g(x) — h(x) = co, where c; and cp are both constants. Hence, 


F(x) —h(x) = (F(a) — 9(2)) + (ge) —h(@)) = a1 $2 
and f’(x) —h’(x) =0. Therefore, f(x) ~ h(a). 


For (#1, y1) and (2, y2) in R?, define (1, y1) ~ (£2, y2) if = +y? = = +y2. 
Solution 


Then ~ is an equivalence relation on R?. 


wv Example 1.24 


Let A and B be 2 x 2 matrices with entries in the real numbers. We can define an equivalence relation on the set of 2 x 2 
matrices, by saying A ~ B if there exists an invertible matrix P such that PAP~! = B. For example, if 


ee 1 2 BaEe ae —18 33 ; 
—1 1 —11 20 
Solution 
then A ~ B since PAP! = B for 


(23) 
(89) 


Then [AI~! =I AI = A; therefore, the relation is reflexive. To show symmetry, suppose that A ~ B. Then there exists an 
invertible matrix P such that PAP~! = B. So 


Let I be the 2 x 2 identity matrix; that is, 
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Finally, suppose that A~B and B~C. Then there exist invertible matrices P and Q such that PAP~!=B and 
QBQ* =C-. Since 


A=P"BP=P"'B(P")". 


C=QBQ*=QPAP*Q*=(QP)A(QP)", 


the relation is transitive. Two matrices that are equivalent in this manner are said to be similar. 


A partition P of a set X is a collection of nonempty sets X;, X2,...such that X;.X;=0@ fori Aj and U, X;, =X. Let ~ be 
an equivalence relation on a set X and let ¢ ¢ X. Then [x] ={y © X: y~ 2} is called the equivalence class of x. We will see 
that an equivalence relation gives rise to a partition via equivalence classes. Also, whenever a partition of a set exists, there is some 
natural underlying equivalence relation, as the following theorem demonstrates. 


& Theorem 1.25 


Given an equivalence relation ~ ona set X, the equivalence classes of X form a partition of X. Conversely, if P = {X;} is a 
partition of a set X,, then there is an equivalence relation on X with equivalence classes X;. 


Proof 


Suppose there exists an equivalence relation ~ on the set X. For any z € X, the reflexive property shows that x € [x] and 
so [x] is nonempty. Clearly X = U,-x[2]. Now let «,y € X. We need to show that either [x] = [y] or [x] M[y] =90. 
Suppose that the intersection of [a] and [y] is not empty and that z € [x] 7 [y]. Then z~ a and z~y. By symmetry and 
transitivity x ~ y; hence, [x] C [y]. Similarly, [y] C [x] and so [a] = [y]. Therefore, any two equivalence classes are either 
disjoint or exactly the same. 


Conversely, suppose that P = {X;} is a partition of a set X. Let two elements be equivalent if they are in the same 
partition. Clearly, the relation is reflexive. If x is in the same partition as y, then y is in the same partition as x, soz ~y 
implies y ~ z. Finally, if x is in the same partition as y and y is in the same partition as z, then x must be in the same 
partition as z, and transitivity holds. 


¥ Corollary 1.26 


Two equivalence classes of an equivalence relation are either disjoint or equal. 


Let us examine some of the partitions given by the equivalence classes in the last set of examples. 


In the equivalence relation in Example 1.21, two pairs of integers, (p, q) and (r, s), 
Solution 


are in the same equivalence class when they reduce to the same fraction in its lowest terms. 


vY Example 1.28 


In the equivalence relation in Example 1.22, two functions f(z) and g(x) 
Solution 


are in the same partition when they differ by a constant. 


Y Example 1.29 


We defined an equivalence class on R? by (21, 41) ~ (x2, y2) if 2? +y? = 23 +2. 


Solution 
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| Two pairs of real numbers are in the same partition when they lie on the same circle about the origin. 


Y Example 1.30 


Let r and s be two integers and suppose that n € N. We say that r is congruent to s modulo n, or r is congruent to s mod n, 
if r—s is evenly divisible by n; that is, r—s =nk forsomek € Z. 


Solution 


In this case we write r= s (mod n). For example, 41 =17 (mod 8) since 41 —17 = 24 is divisible by 8. We claim that 
congruence modulo n forms an equivalence relation of Z. Certainly any integer r is equivalent to itself since r—r =O is 
divisible by n. We will now show that the relation is symmetric. If r=s (mod n), then r—s=-—(s—r) is divisible by n. 
So s—r is divisible by n and s=r (mod n). Now suppose that r=s (mod n) and s=t (mod n). Then there exist 
integers k and! such thatr —s=kn ands—t=In. To show transitivity, it is necessary to prove that r—t is divisible by n. 
However, 


r—t=r—s+s—t=kn4+ln=(k+]n, 
and so r —t is divisible by n. 


If we consider the equivalence relation established by the integers modulo 3, then 


[0] ={..., -3,0,3,6,...}, 
DU steer — a le een 
(2) ey 255, 8)nat 


Notice that [0] U [1] U [2] =Z and also that the sets are disjoint. The sets [0], [1], and [2] form a partition of the integers. 


The integers modulo n are a very important example in the study of abstract algebra and will become quite useful in our 
investigation of various algebraic structures such as groups and rings. In our discussion of the integers modulo n we have 
actually assumed a result known as the division algorithm, which will be stated and proved in Chapter 2. 


This page titled 1.2: Sets and Equivalence Relations is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, 
and/or curated by Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of 


the LibreTexts platform; a detailed edit history is available upon request. 
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1.3: Reading Questions 


What do relations and mappings have in common? 
What makes relations and mappings different? 


State carefully the three defining properties of an equivalence relation. In other words, do not just name the properties, give 
their definitions. 


What is the big deal about equivalence relations? (Hint: Partitions.) 


Describe a general technique for proving that two sets are equal. 


7B 7B iB 7B 


This page titled 1.3: Reading Questions is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or 
curated by Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the 
LibreTexts platform; a detailed edit history is available upon request. 
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1.4: Exercises 


Suppose that 


A ={«:x¢€Nandz iseven}, 
B={x:«a€Nandz is prime}, 
C ={x:a¢Nandz isa multiple of 5}. 


Describe each of the following sets. 


1. ANB 
2. BNC 
3. AUB 
4. AN (BUC) 


If A= {a,b,c}, B= {1, 2,3}, C = {x}, and D =9, list all of the elements in each of the following sets. 


1AxB 
2.BxA 
3.AxBxC 
4.AxD 


Find an example of two nonempty sets A and B for which Ax B= Bx A is true. 


Prove AU@=A and ANO=9. 


Prove AUB=BUA and ANB=BNA. 


Prove AU(BNC) =(AUB)N(AUC),. 


Prove AN (BUC) =(ANB)U(ANC). 


Prove A C B if andonly if ANB=A. 


fr 
= 
Fm 
= 
fa 
c 
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Prove (AM B)! = A'UB’. 

Prove AUB = (AN B)U(A\ B)U(B\ A). 
Prove (AU B) x C =(AxC)U(BxC). 
Prove (AN B)\ B=90. 

Prove (AU B)\ B= A\ B. 
Prove A\ (BUC) =(A\ B)N(A\C). 
Prove AN (B\ C) = (ANB) \ (ANC). 


Prove (A\ B)U(B\ A) = (AUB) \ (ANB). 


= 
= 
r= 
ez 
= 
= 
= 


Which of the following relations f : Q— Q define a mapping? In each case, supply a reason why f is or is not a mapping. 


Determine which of the following functions are one-to-one and which are onto. If the function is not onto, determine its range. 


1. f : RR defined by f(x) =e” 


a 
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Let f: AB and g:B—C be invertible mappings; that is, mappings such that f-! and g™! exist. Show that 
(gof)* =f tog". 


1. Define a function f : N > N that is one-to-one but not onto. 
2. Define a function f : N — N that is onto but not one-to-one. 


Prove the relation defined on R? by (21, y1) ~ (2, y2) if ce + y? = i + ys is an equivalence relation. 


Let f: A> B andg: B->C be maps. 
1. If f and g are both one-to-one functions, show that go f is one-to-one. 
2. If go f is onto, show that g is onto. 
3. If go f is one-to-one, show that f is one-to-one. 
4. If go f is one-to-one and f is onto, show that g is one-to-one. 
5. If go f is onto and g is one-to-one, show that f is onto. 


Define a function on the real numbers by 


a+1 
z—1- 


f(z) = 


What are the domain and range of f? What is the inverse of f? Compute f o f-! and f-! of. 


Let f: X ~ Y beamap with Aj, Ap C X and By, Bp CY. 
1. Prove f(A U Az) = f (At) U f (Az). 
2. Prove f(A1M Az) C f(A1)M f(Az). Give an example in which equality fails. 
3. Prove fam (By UB:) = fie (Bi) U 7 (Bo), where 
ff (B) ={x € X: f(z) € B}. 


4. Prove Po (By NB) = f= (Bi) (a 7 es (Bo). 
S Prove (Yi) — 4 f (21). 


Determine whether or not the following relations are equivalence relations on the given set. If the relation is an equivalence 
relation, describe the partition given by it. If the relation is not an equivalence relation, state why it fails to be one. 


larvyinRife>y 
2.m~ninZifmn>0 
3.a~yinRif|e—y|<4 
4.m~ninZifm=n (mod 6) 
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Define a relation ~ on R? by stating that (a,b) ~ (c,d) if and only if a? +b? <c?+d?. Show that ~ is reflexive and 
transitive but not symmetric. 


Show that an m x n matrix gives rise to a well-defined map from R” to R™. 


Find the error in the following argument by providing a counterexample. “The reflexive property is redundant in the axioms for 
an equivalence relation. If zc ~ y, then y ~ x by the symmetric property. Using the transitive property, we can deduce that 
BB ae 


Projective Real Line 


Define a relation on R?\ {(0,0)} by letting (a1, 41) ~(22,y2) if there exists a nonzero real number \ such that 
(a1, y1) = (Av2, Aya). Prove that ~ defines an equivalence relation on R? \ (0,0). What are the corresponding equivalence 
classes? This equivalence relation defines the projective line, denoted by P(IR), which is very important in geometry. 


This page titled 1.4: Exercises is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or curated by 
Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the LibreTexts 


platform; a detailed edit history is available upon request. 
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1.6: Sage 


Sage is a powerful system for studying and exploring many different areas of mathematics. In this textbook, you will study a 
variety of algebraic structures, such as groups, rings and fields. Sage does an excellent job of implementing many features of these 
objects as we will see in the chapters ahead. But here and now, in this initial chapter, we will concentrate on a few general ways of 
getting the most out of working with Sage. 


You may use Sage several different ways. It may be used as a command-line program when installed on your own computer. Or it 
might be a web application such as the SageMathCloud. Our writing will assume that you are reading this as a worksheet within the 
Sage Notebook (a web browser interface), or this is a section of the entire book presented as web pages, and you are employing the 
Sage Cell Server via those pages. After the first few chapters the explanations should work equally well for whatever vehicle you 
use to execute Sage commands. 


Executing Sage Commands 


Most of your interaction will be by typing commands into a compute cell. If you are reading this in the Sage Notebook or as a 
webpage version of the book, then you will see a compute cell just below this paragraph. Click once inside the compute cell and if 
you are in the Sage Notebook, you will get a more distinctive border around it, a blinking cursor inside, plus a cute little “evaluate” 
link below. 


At the cursor, type 2+2 and then click on the evaluate link. Dida 4 appear below the cell? If so, you have successfully sent a 
command off for Sage to evaluate and you have received back the (correct) answer. 


Here is another compute cell. Try evaluating the command factorial(300) here. 


Hmmmmm. That is quite a big integer! If you see slashes at the end of each line, this means the result is continued onto the next 
line, since there are 615 total digits in the result. 


To make new compute cells in the Sage Notebook (only), hover your mouse just above another compute cell, or just below some 
output from a compute cell. When you see a skinny blue bar across the width of your worksheet, click and you will open up a new 
compute cell, ready for input. Note that your worksheet will remember any calculations you make, in the order you make them, no 
matter where you put the cells, so it is best to stay organized and add new cells at the bottom. 


Try placing your cursor just below the monstrous value of 300! that you have. Click on the blue bar and try another factorial 
computation in the new compute cell. 


Each compute cell will show output due to only the very last command in the cell. Try to predict the following output before 
evaluating the cell. 


The following compute cell will not print anything since the one command does not create output. But it will have an effect, as you 
can see when you execute the subsequent cell. Notice how this uses the value of b from above. Execute this compute cell once. 
Exactly once. Even if it appears to do nothing. If you execute the cell twice, your credit card may be charged twice. 


Now execute this cell, which will produce some output. 


So b came into existence as 6 . We subtracted 10 immediately afterward. Then a subsequent cell added 50 . This assumes 
you executed this cell exactly once! In the last cell we create +20 (but do not save it) and it is this value (66) that is output, 
while b_ is still 46. 


You can combine several commands on one line with a semi-colon. This is a great way to get multiple outputs from a compute cell. 
The syntax for building a matrix should be somewhat obvious when you see the output, but if not, it is not particularly important to 
understand now. 


Immediate Help 


Some commands in Sage are “functions,” an example is factorial() above. Other commands are “methods” of an object 
and are like characteristics of objects, an example is .inverse() asa method of a matrix. Once you know how to create an 
object (such as a matrix), then it is easy to see all the available methods. Write the name of the object, place a period (“dot”) and hit 
the TAB key. If you have A defined from above, then the compute cell below is ready to go, click into it and then hit TAB (not 
“evaluate”!). You should get a long list of possible methods. 
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To get some help on how to use a method with an object, write its name after a dot (with no parentheses) and then use a question- 
mark and hit TAB. (Hit the escape key “ESC” to remove the list, or click on the text for a method.) 


With one more question-mark and a TAB you can see the actual computer instructions that were programmed into Sage to make the 
method work, once you scoll down past the documentation delimited by the triple quotes ( ""'"" ): 


It is worthwhile to see what Sage does when there is an error. You will probably see a lot of these at first, and initially they will be a 
bit intimidating. But with time, you will learn how to use them effectively and you will also become more proficient with Sage and 
see them less often. Execute the compute cell below, it asks for the inverse of a matrix that has no inverse. Then reread the 
commentary. 


Click just to the left of the error message to expand it fully (another click hides it totally, and a third click brings back the 
abbreviated form). Read the bottom of an error message first, it is your best explanation. Herea ZeroDivisionError isnot 
100% accurate, but is close. The matrix is not invertible, not dissimilar to how we cannot divide scalars by zero. The remainder of 
the message begins at the top showing were the error first happened in your code and then the various places where intermediate 
functions were called, until the actual piece of Sage where the problem occurred. Sometimes this information will give you some 
clues, sometimes it is totally undecipherable. So do not let it scare you if it seems mysterious, but do remember to always read the 
last line first, then go back and read the first few lines for something that looks like your code. 


Annotating Your Work 


It is easy to comment on your work when you use the Sage Notebook. (The following only applies if you are reading this within a 
Sage Notebook. If you are not, then perhaps you can go open up a worksheet in the Sage Notebook and experiment there.) You can 
open up a small word-processor by hovering your mouse until you get a skinny blue bar again, but now when you click, also hold 
the SHIFT key at the same time. Experiment with fonts, colors, bullet lists, etc and then click the “Save changes” button to exit. 
Double-click on your text if you need to go back and edit it later. 


Open the word-processor again to create a new bit of text (maybe next to the empty compute cell just below). Type all of the 
following exactly, 


. 
Pythagorean Theorem: $c42=ah2+bA2$ 


and save your changes. The symbols between the dollar signs are written according to the mathematical typesetting language 
known as TeX — cruise the internet to learn more about this very popular tool. (Well, it is extremely popular among 
mathematicians and physical scientists.) 


Lists 


Much of our interaction with sets will be through Sage lists. These are not really sets — they allow duplicates, and order matters. 
But they are so close to sets, and so easy and powerful to use that we will use them regularly. We will use a fun made-up list for 
practice, the quote marks mean the items are just text, with no special mathematical meaning. Execute these compute cells as we 
work through them. 


So the square brackets define the boundaries of our list, commas separate items, and we can give the list a name. To work with just 
one element of the list, we use the name and a pair of brackets with an index. Notice that lists have indices that begin counting at 
zero. This will seem odd at first and will seem very natural later. 


We can add a new creature to the zoo, it is joined up at the far right end. 
We can remove a creature. 


We can extract a sublist. Here we start with element 1 (the elephant) and go all the way up to, but not including, element 3 (the 
beetle). Again a bit odd, but it will feel natural later. For now, notice that we are extracting two elements of the lists, exactly 
3 —1=2 elements. 


Often we will want to see if two lists are equal. To do that we will need to sort a list first. A function creates a new, sorted list, 
leaving the original alone. So we need to save the new one with a new name. 


Notice that if you run this last compute cell your zoo has changed and some commands above will not necessarily execute the same 
way. If you want to experiment, go all the way back to the first creation of the zoo and start executing cells again from there with a 
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fresh zoo. 


A construction called a list comprehension is especially powerful, especially since it almost exactly mirrors notation we use to 
describe sets. Suppose we want to form the plural of the names of the creatures in our zoo. We build a new list, based on all of the 
elements of our old list. 


Almost like it says: we add an “s” to each animal name, for each animal in the zoo, and place them in a new list. Perfect. (Except 
for getting the plural of “ostrich” wrong.) 


Lists of Integers 


One final type of list, with numbers this time. The srange() function will create lists of integers. (The “s” in the name stands 
for “Sage” and so will produce integers that Sage understands best. Many early difficulties with Sage and group theory can be 
alleviated by using only this command to create lists of integers.) In its simplest form an invocation like srange(12) will 
create a list of 12 integers, starting at zero and working up to, but not including, 12. Does this sound familiar? 


Here are two other forms, that you should be able to understand by studying the examples. 


Saving and Sharing Your Work 


There is a “Save” button in the upper-right corner of the Sage Notebook. This will save a current copy of your worksheet that you 
can retrieve your work from within your notebook again later, though you have to re-execute all the cells when you re-open the 
worksheet. 


There is also a “File” drop-down list, on the left, just above your very top compute cell (not be confused with your browser's File 
menu item!). You will see a choice here labeled “Save worksheet to a file...” When you do this, you are creating a copy of your 
worksheet in the sws_ format (short for “Sage WorkSheet”). You can email this file, or post it on a website, for other Sage users 
and they can use the “Upload” link on the homepage of their notebook to incorporate a copy of your worksheet into their notebook. 


There are other ways to share worksheets that you can experiment with, but this gives you one way to share any worksheet with 
anybody almost anywhere. 


We have covered a lot here in this section, so come back later to pick up tidbits you might have missed. There are also many more 
features in the Sage Notebook that we have not covered. 


This page titled 1.6: Sage is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or curated by Thomas 


W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the LibreTexts platform; a 
detailed edit history is available upon request. 
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1.7: Sage Exercises 


This exercise is just about making sure you know how to use Sage. You may be using the Sage Notebook server the online CoCalc 
service through your web browser. In either event, create a new worksheet. Do some non-trivial computation, maybe a pretty plot 
or some gruesome numerical computation to an insane precision. Create an interesting list and experiment with it some. Maybe 
include some nicely formatted text or TeX using the included mini-word-processor of the Sage Notebook (hover until a blue bar 
appears between cells and then shift-click) or create commentary in cells within CoCalc using the magics “%ntml or %md ona 
line of their own followed by text in HTML or Markdown syntax (respectively). 


Use whatever mechanism your instructor has in place for submitting your work. Or save your worksheet and then trade with a 


classmate. 


This page titled 1.7: Sage Exercises is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or curated by 
Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the LibreTexts 


platform; a detailed edit history is available upon request. 
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CHAPTER OVERVIEW 


2: The Integers 


The integers are the building blocks of mathematics. In this chapter we will investigate the fundamental properties of the integers, 
including mathematical induction, the division algorithm, and the Fundamental Theorem of Arithmetic. 

2.1: Mathematical Induction 

2.2: The Division Algorithm 

2.3: Reading Questions 

2.4: Exercises 

2.5: Programming Exercises 

2.6: References and Suggested Readings 

2.7: Sage 


2.8: Sage Exercises 
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2.1: Mathematical Induction 

Suppose we wish to show that 

n(n +1) 
2 


for any natural number n. This formula is easily verified for small numbers such as n = 1, 2, 3, or 4, but it is impossible to verify 
for all natural numbers on a case-by-case basis. To prove the formula true in general, a more generic method is required. 


14+2+---+n= 


Suppose we have verified the equation for the first m cases. We will attempt to show that we can generate the formula for the 
(n +1) th case from this knowledge. The formula is true for n = 1 since 


i 1(1+1) 
~~ % 
If we have verified the first m cases, then 
n(n+1 
14+2+---+n+(n+1) =e ntl 

_ n2+3n+2 

- 2 
(n+1)[(n+1)4+1] 


2 
This is exactly the formula for the (n + 1) th case. 


This method of proof is known as mathematical induction. Instead of attempting to verify a statement about some subset S of the 
positive integers N on a case-by-case basis, an impossible task if S' is an infinite set, we give a specific proof for the smallest 
integer being considered, followed by a generic argument showing that if the statement holds for a given case, then it must also 
hold for the next case in the sequence. We summarize mathematical induction in the following axiom. 


¥ Principle 2.1. First Principle of Mathematical Induction 


Let S(n) be a statement about integers for n € N and suppose S(ng) is true for some integer no. If for all integers k with 
k >1o, S(k) implies that S(k+1) is true, then S(n) is true for all integers n greater than or equal to no. 


For all integers n > 3, 2” >n-+A4. Since 
S—=2) > 344-7. 
the statement is true for ng = 3. Assume that 2>k+4 fork >3. 
Solution 
Then 2*+1 —2.2* > 2(k+4). But 
2(k+4) =2k+8 >k+5=(k+1)+4 


since k is positive. Hence, by induction, the statement holds for all integers n > 3. 


Every integer 10°*1 +3-10"+5 is divisible by 9 forn € N. Forn =1, 
1011 +3-10+5 =135 =9-15 


is divisible by 9. Suppose that 10**! +3-10* +5. is divisible by 9 for k > 1. 


Solution 
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Then 
104@+H)+14.3.19Ft145 = 1082 +3.10'1 +50 —45 
= 10(10"*" +3-10*+5)—45 


is divisible by 9. 


vY Example 2.4 


We will prove the binomial theorem using mathematical induction; that is, 


(a+b)" = 3 C ete 


k=0 


where a and b are real numbers, n € N, and 


is the binomial coefficient. 
Solution 


We first show that 


This result follows from 


n n n! n! 
(;) (01) “Go | Cangas ean 
(n= 1—m)! 


_ {n+l 
= aa 
If mn = 1, the binomial theorem is easy to verify. Now assume that the result is true for n greater than or equal to 1. Then 


(a+b)"*? =(a+5)(a+b)" 

= (a+b) (s: C) ae) 

k=0 
= Ss @) ak tlpr-* oS @) akprti 
k=0 k k=0 k 
=qrat Se ( n Jaton) (;) ator tsk 4 prt 
k=1 k-1 k=1 k 

_ ntl =~ n n kyn4+1—-k ntl 
10) +1671) +G)] +6 


SI 
- 3 es kyntl—k 
fo \ 


We have an equivalent statement of the Principle of Mathematical Induction that is often very useful. 
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¥ Principle 2.5. Second Principle of Mathematical Induction 


Let S(n) be a statement about integers for »m€N and suppose S(no) is true for some integer no. If 
S(no), S(no +1),.-., S(&) imply that S(k+1) for k > no, then the statement S(n) is true for all integers n > no. 


A nonempty subset S of Z is well-ordered if S contains a least element. Notice that the set Z is not well-ordered since it does not 
contain a smallest element. However, the natural numbers are well-ordered. 


¥ Principle 2.6. Principle of Well-Ordering 


Every nonempty subset of the natural numbers is well-ordered. 


The Principle of Well-Ordering is equivalent to the Principle of Mathematical Induction. 


& Lemma 2.7 


The Principle of Mathematical Induction implies that 1 is the least positive natural number. 


Proof 


Let S={neEN:n>1}. Then1€S. Assume that n € S. Since 0 <1, it must be the case thatn =n+0<n+1. 
Therefore, 1 <n<n+1. Consequently, ifn € S$, then n+1 must also be in S, and by the Principle of Mathematical 
Induction, and we have S =N. 


& Theorem 2.1.1 


The Principle of Mathematical Induction implies the Principle of Well-Ordering. That is, every nonempty subset of N contains 
a least element. 


Proof 


We must show that if S' is a nonempty subset of the natural numbers, then S contains a least element. If S' contains 1, then 
the theorem is true by Lemma 2.7. Assume that if S contains an integer k such that 1<k<n, then S contains a least 
element. We will show that if a set S' contains an integer less than or equal to n +1, then S' has a least element. If S does 
not contain an integer less than n+ 1, then n+1 is the smallest integer in S. Otherwise, since S is nonempty, S must 
contain an integer less than or equal to n. In this case, by induction, S contains a least element. 


Induction can also be very useful in formulating definitions. For instance, there are two ways to define n!, the factorial of a positive 
integer n. 

e The explicit definition: n! =1-2-3---(n—1)-n. 

e The inductive or recursive definition: 1! = 1 and n! = n(n —1)! forn > 1. 


Every good mathematician or computer scientist knows that looking at problems recursively, as opposed to explicitly, often results 
in better understanding of complex issues. 


This page titled 2.1: Mathematical Induction is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or 
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2.2: The Division Algorithm 


An application of the Principle of Well-Ordering that we will use often is the division algorithm. 


& Theorem 2.9 


The probabilities assigned to events by a distribution function on a sample space are given by. 


Proof 
This is a perfect example of the existence-and-uniqueness type of proof. We must first prove that the numbers g and r 
actually exist. Then we must show that if g’ and r’ are two other such numbers, then g=q’ andr =r’. 


Existence of q and r. Let 


S={a—bk:k€ Zanda—bk > 0}. 


If 0 € S, then b divides a, and we can let g=a/b and r=0. If 0 ¢ S, we can use the Well-Ordering Principle. We must first 
show that S$ is nonempty. If a >0, thena—b-0€ S. Ifa <0, then a—b(2a) =a(1—2b) € S. In either case S#Q@. By the 
Well-Ordering Principle, S must have a smallest member, say r= a—bg. Therefore, a=bq+r, r>0. We now show that 
r <b. Suppose that r > 6. Then 


a—b(q+1) =a—bqg—b=r—b>0. 
In this case we would have a—b(q+1) in the set S. But then a—b(q+1)<a-—bgq, which would contradict the fact that 
r =a—bg is the smallest member of S. Sor < b. SinceO0 € S,r#b andsor <b. 
Uniqueness of q and r. Suppose there exist integers r, r’, q, and q’ such that 
a=bq+r,0<r<b and a=bq'4+r',0<r' <b. 
Then bg +r =bq'+r’. Assume that r’ >r. From the last equation we have b(q—gq’) =r’ —r;_ therefore, b must divide r’ —r 
and0<r’—r<r' <b. This is possible only if r’ -r =0. Hence, r=r’ andq=q’. 


Let a and b be integers. If b = ak for some integer k, we write a | b. An integer d is called a common divisor of a and b if d| a 
and d | b. The greatest common divisor of integers a and b is a positive integer d such that d is a common divisor of a and b and if 
d' is any other common divisor of a and b, then d’|d. We write d=gcd(a,b); for example, gcd(24,36)=12 and 
gcd(120, 102) = 6. We say that two integers a and b are relatively prime if gcd(a, b) = 1. 


& Theorem 2.10 


Let a and b be nonzero integers. Then there exist integers r and s such that 
gced(a, b) =ar+bs. 
Furthermore, the greatest common divisor of a and b is unique. 
Proof 
Let 


S={am+bn:m,n€ Zandam+bn > 0}. 


Clearly, the set S is nonempty; hence, by the Well-Ordering Principle S must have a smallest member, say d =ar-+bs. We claim 
that d = ged(a, b). Writea =dq+r’ whereO <r’ <d. Ifr’ >0, then 


/ 

r =a—dq 
=a-—(ar+bs)q 
=a-—arq-—bsq 


= a(1—rq) +b(—sq), 


GNU Free Documentation License https ://math.libretexts.org/@go/page/81032 


Oibretexts: 


which is in S. But this would contradict the fact that d is the smallest member of S. Hence, r’ =0 and d divides a. A similar 
argument shows that d divides b. Therefore, d is a common divisor of a and b. 


Suppose that d’ is another common divisor of a and b, and we want to show that d’ | d. If we leta = d'h and b = d'k, then 
d=ar+bs=d'hr+d'ks =d'(hr+ks). 


So d’ must divide d. Hence, d must be the unique greatest common divisor of a and b. 


#¥ Corollary 2.11 


Let a and b be two integers that are relatively prime. Then there exist integers r and s such that ar +bs = 1. 


The Euclidean Algorithm 


Among other things, Theorem 2.10 allows us to compute the greatest common divisor of two integers. 


Let us compute the greatest common divisor of 945 and 2415. 
Solution 
First observe that 


2415 =945-2+4525 

945 = 525-1+420 

525 =420-1+105 

420 =105-4+0. 
Reversing our steps, 105 divides 420, 105 divides 525, 105 divides 945, and 105 divides 2415. Hence, 105 divides both 945 
and 2415. If d were another common divisor of 945 and 2415, then d would also have to divide 105. Therefore, 
gcd(945, 2415) = 105. 
If we work backward through the above sequence of equations, we can also obtain numbers r and s_ such that 
945r + 2415s = 105. Observe that 


105 =525 +(-1)-420 
= 525 + (—1)- [945 + (—1) -525] 
=2-5254(—1)-945 
=2- [2415 + (—2)-945] + (—1)- 945 
=2-2415 + (—5)-945. 


Sor =-—65 and s = 2. Notice that r and s are not unique, since r = 41 and s = —16 would also work. 
To compute gcd(a,b)=d, we are using repeated divisions to obtain a decreasing sequence of positive integers 
T, >1T2 >-+-:>Tp, =d; that is, 


b=aqy+r1 
a@=7142 TT2 
T1 =71293 +73 


Tn—-2 =Tn-19n + Tn 


Tn-1 =TnQn+1- 


To find r and s such that ar -+bs =d, we begin with this last equation and substitute results obtained from the previous equations: 
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d=Tn 
=Tn-2 —Tn-19n 
=Tn-2 — Qn (Tn-3 = Qn—1T n—2) 
= —GnTn—3 + (1+ GnGn—1)Pn—2 


=ra+sb. 
The algorithm that we have just used to find the greatest common divisor d of two integers a and 6 and to write d as the linear 
combination of a and b is known as the Euclidean algorithm. 
Prime Numbers 


Let p be an integer such that p > 1. We say that p is a prime number, or simply p is prime, if the only positive numbers that divide 
pare 1 and p itself. An integer n > 1 that is not prime is said to be composite. 


& Lemma 2.13. Euclid 


Let a and b be integers and p be a prime number. If p | ab, then either p | a or p| b. 


Proof 


Suppose that p does not divide a. We must show that p | b. Since gcd(a, p) =1, there exist integers r and s such that 
ar+ps=1. So 


b = b(ar + ps) = (ab)r +p(bs). 


Since p divides both ab and itself, p must divide b = (ab)r + p(bs). 


& Theorem 2.14. Euclid 


There exist an infinite number of primes. 


Proof 


We will prove this theorem by contradiction. Suppose that there are only a finite number of primes, say p1, p2,..., Pn. Let 
P=p\p2---Pn+1. Then P must be divisible by some p; for 1<i<n. In this case, p; must divide 
P—p,p2-+-+pn =1, which is a contradiction. Hence, either P is prime or there exists an additional prime number p # p; 
that divides P. 


& Theorem 2.15. Fundamental Theorem of Arithmetic 


Let n be an integer such that n > 1. Then 


nN = Pi1p2°** Pk; 
where pj, ..., Pz are primes (not necessarily distinct). Furthermore, this factorization is unique; that is, if 
n= q192°°* Ql, 


then k =1 and the q;'s are just the p;'s rearranged. 


Proof 


Uniqueness. To show uniqueness we will use induction on n. The theorem is certainly true for n =2 since in this case n is 
prime. Now assume that the result holds for all integers m such that 1 <m <n, and 


n= pipr:::Pk=192°°* QW, 


GNU Free Documentation License https ://math.libretexts.org/@go/page/81032 


Oibreexts: 


where pi <po <---<pp and qi <q. <---<q. By Lemma 2.13, p; | q for some i=1,...,1 and q |p; for some 
j=l1,...,k. Since all of the p,'s and q;'s are prime, p) = q; and q; = p;. Hence, pj = qi since p;) <pj=q <qi=pi. By 
the induction hypothesis, 


n! =o°** Pk =Qa°*° 
has a unique factorization. Hence, k =/ and q; =p; fori =1,...,k. 


Existence. To show existence, suppose that there is some integer that cannot be written as the product of primes. Let S' be the 
set of all such numbers. By the Principle of Well-Ordering, S has a smallest number, say a. If the only positive factors of a are 
a and 1, then a is prime, which is a contradiction. Hence, a = a;a_ where 1 <a, <a and1 <a) <a. Neither a; € S nor 
az € S, since a is the smallest element in S. So 


Qa, =Pi-°* Pr 
a2 = 41°"'Ys- 


Therefore, 


@ = 4102 = Pi*** Prdi*** Qs- 


Soa ¢ 5S, which is a contradiction. 


Historical Note 


Prime numbers were first studied by the ancient Greeks. Two important results from antiquity are Euclid's proof that an infinite 
number of primes exist and the Sieve of Eratosthenes, a method of computing all of the prime numbers less than a fixed positive 
integer n. One problem in number theory is to find a function f such that f(n) is prime for each integer n. Pierre Fermat (1601?- 
1665) conjectured that 2?" +1 was prime for all n, but later it was shown by Leonhard Euler (1707-1783) that 


2” +1 =4,294,967,297 


is a composite number. One of the many unproven conjectures about prime numbers is Goldbach's Conjecture. In a letter to Euler 
in 1742, Christian Goldbach stated the conjecture that every even integer with the exception of 2 seemed to be the sum of two 
primes: 4 =2+2, 6 =3+3, 8=3+5, .... Although the conjecture has been verified for the numbers up through 4 x 10!8, it 
has yet to be proven in general. Since prime numbers play an important role in public key cryptography, there is currently a great 
deal of interest in determining whether or not a large number is prime. 
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2.3: Reading Questions 


Use Sage to express 123456792as a product of prime numbers. 


Find the greatest common divisor of 84 and 52. 
Find integers r and s so that r(84) + s(52) = gcd(84, 52). 
Explain the use of the term “induction hypothesis.” 


What is Goldbach's Conjecture? And why is it called a “conjecture”? 


78:8 :B 
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2.4: Exercises 


Prove that 
PoP deni = Ae Gort. 
6 
forn EN. 
Prove that 
2 2 
nea cuneemee e (n+1) 
4 
fornEeN. 
Prove that n! > 2” forn > 4. 
Prove that 
n(3n—1)z 


a 4e ie (an — 2) = 5 


forn EN. 


Prove that 10"*! + 10” +1 is divisible by 3 forn € N. 


Prove that 4-10?" +9-10?"-!+5 is divisible by 99 forn € N. 


Show that 


| 
YS 


1 
4/A1Q2°** An < 
n 


 *8 BB: ;B:B: :B 


Prove the Leibniz rule for f(")(a), where f‘”) is the nth derivative of f; that is, show that 


(10) => (7) 1 @)0"). 


k=0 
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Use induction to prove that 1+2+2?+4---+2"=2""1_1 forneN. 


Prove that 
ey fs 1 on 
2 6 n(n+1) n+l 
forn EN. 


If x is a nonnegative real number, then show that (1+ a2)"—1>nza forn=0,1,2,.... 


Power Sets 


Let X be a set. Define the power set of X, denoted P(X), to be the set of all subsets of X. For example, 


P({a, b}) = {0, {a}, {b}, {a, b}}. 


For every positive integer n, show that a set with exactly n elements has a power set with exactly 2” elements. 


| Prove that the two principles of mathematical induction stated in Section 2.1 are equivalent. 


Show that the Principle of Well-Ordering for the natural numbers implies that 1 is the smallest natural number. Use this result 
to show that the Principle of Well-Ordering implies the Principle of Mathematical Induction; that is, show that if S C N such 
that 1 € S andn+1€S whenever n € S, then S=N. 


For each of the following pairs of numbers a and b, calculate gcd(a,b) and find integers r and s such that 
gced(a,b) =ra+sb. 


1. 14 and 39 

2. 234 and 165 

3. 1739 and 9923 
4. 471 and 562 

5. 23771 and 19945 
6. —4357 and 3754 


Let a and b be nonzero integers. If there exist integers r and s such that ar+ bs = 1, show that a and 0 are relatively prime. 
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Fibonacci Numbers 


The Fibonacci numbers are 
1114s Bh, Wats MBL Pall one 
We can define them inductively by f; =1, fo =1, and frso =fniit fn forn € N. 


1. Prove that f, <2”. 

2. Prove that fniifa—1 = f2+(-1)", n>2. 

3, Prove that f, =[(1 +75)" —(1—V/5)"]/2° v5. 

4. Show that ¢ = limp 400 fnyi/fn = (V5 +1)/2. The constant ¢ is known as the golden ratio. 
5. Prove that f, and f,+1 are relatively prime. 


Let a and b be integers such that gcd(a, b) = 1. Let r and s be integers such that ar +bs = 1. Prove that 


gced(a, s) = gcd(r, b) = gcd(r, s) =1. 


Let 2, y € N be relatively prime. If xy is a perfect square, prove that x and y must both be perfect squares. 


Using the division algorithm, show that every perfect square is of the form 4k or 4k +1 for some nonnegative integer k. 


Suppose that a, b, r, s are pairwise relatively prime and that 


Pi — 2 
a+b =r 
a? —B =". 


Prove that a, r, and s are odd and 6 is even. 


Let n €N. Use the division algorithm to prove that every integer is congruent mod n to precisely one of the integers 
0,1,...,n—1. Conclude that if r is an integer, then there is exactly one s in Z such that 0 < s <n and [r] =[s]. Hence, the 
integers are indeed partitioned by congruence mod n. 


Define the least common multiple of two nonzero integers a and b, denoted by lcm(a, b), to be the nonnegative integer m 
such that both a and b divide m, and if a and b divide any other integer n, then m also divides n. Prove there exists a unique 
least common multiple for any two integers a and b. 


If d = gcd(a, b) and m =1cm(a, b), prove that dm = |ab|. 
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Show that lem(a, b) = ab if and only if gcd(a, b) = 1. 

Prove that gcd(a, c) = gcd(b, c) = 1 if and only if gcd(ab, c) = 1 for integers a, b, and c. 
Let a, b,c € Z. Prove that if gcd(a, b) =1 anda| be, thena|c. 

Let p > 2. Prove that if 2? — 1 is prime, then p must also be prime. 

Prove that there are an infinite number of primes of the form 6n + 5. 

Prove that there are an infinite number of primes of the form 4n — 1. 


Using the fact that 2 is prime, show that there do not exist integers p and q such that p? = 2q”. Demonstrate that therefore \/2 
cannot be a rational number. 


ub HB :H eB 
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2.5: Programming Exercises 


The Sieve of Eratosthenes 


One method of computing all of the prime numbers less than a certain fixed positive integer NV is to list all of the numbers n 
such that 1 <n < N. Begin by eliminating all of the multiples of 2. Next eliminate all of the multiples of 3. Now eliminate 
all of the multiples of 5. Notice that 4 has already been crossed out. Continue in this manner, noticing that we do not have to 
go all the way to N; it suffices to stop at /N. Using this method, compute all of the prime numbers less than N = 250. We 
can also use this method to find all of the integers that are relatively prime to an integer N. Simply eliminate the prime factors 
of N and all of their multiples. Using this method, find all of the numbers that are relatively prime to N =120. Using the 
Sieve of Eratosthenes, write a program that will compute all of the primes less than an integer NV. 


Let N° = NU {0}. Ackermann's function is the function A : N° x N° + N° defined by the equations 
A(0,y) =y+1, 
A(z +1,0) = A(z, 1), 
A(z+1,y+1) = A(z, A(x +1,y)). 
Use this definition to compute A(3, 1). Write a program to evaluate Ackermann's function. Modify the program to count the 


number of statements executed in the program when Ackermann's function is evaluated. How many statements are executed in 
the evaluation of A(4,1)? What about A(5, 1)? 


Write a computer program that will implement the Euclidean algorithm. The program should accept two positive integers a 
and 6 as input and should output gcd(a, b) as well as integers r and s such that 


gced(a, b) =ra+ sb. 
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2.7: Sage 


Many properties of the algebraic objects we will study can be determined from properties of associated integers. And Sage has 
many powerful functions for analyzing integers. 


Division Algorithm 


The code a % 6 will return the remainder upon division of a by b. In other words, the result is the unique integer r such that (1) 
0<r<b, and (2)a=bq+r for some integer g (the quotient), as guaranteed by the Division Algorithm (Theorem 2.9). Then 
(a—r)/b will equal q. For example, 


It is also possible to get both the quotient and remainder at the same time with the .quo_rem() method (quotient and 
remainder). 


A remainder of zero indicates divisibility. So (a % b) == © willreturn True _ if b divides a, and will otherwise return 
False . 


The .divides() method is another option. 


Greatest Common Divisor 
The greatest common divisor of a and 6 is obtained with the command gcd(a, 1) , where in our first uses, a and b are 
integers. Later, a and b can be other objects with a notion of divisibility and “greatness,” such as polynomials. For example, 


We can use the gcd command to determine if a pair of integers are relatively prime. 


The command xgcd(a,b) (“eXtended GCD”) returns a triple where the first element is the greatest common divisor of a and b 
(as with the gcd(a,b) command above), but the next two elements are values of r and s such that ra + sb = gcd(a, b). 


Portions of the triple can be extracted using [| | (“indexing”) to access the entries of the triple, starting with the first as number 
0 . For example, the following should always return the result True , even if you change the values of a and Db . Try 
changing the values of a and b_ below, to see that the result is always True . 


Studying this block of code will go a long way towards helping you get the most out of Sage's output. Note that = is how a value 
is assigned to a variable, while as in the last line, == is how we compare two items for equality. 


Primes and Factoring 


The method .is_prime() will determine if an integer is prime or not. 


The command random _prime(a, proof=True) will generate a random prime number between 2 and a. Experiment by 
executing the following two compute cells several times. (Replacing proof=True by proof=False will speed up the 
search, but there will be a very, very, very small probability the result will not be prime.) 


The command prime _range(a, 1) returns an ordered list of all the primes from a to b —1, inclusive. For example, 


The commands next _prime(a) and previous_prime(a) are other ways to get a single prime number of a desired 
size. Give them a try below if you have an empty compute cell there (as you will if you are reading in the Sage Notebook, or are 
reading the online version). (The hash symbol, # , is used to indicate a “comment” line, which will not be evaluated by Sage. So 
erase this line, or start on the one below it.) 


In addition to checking if integers are prime or not, or generating prime numbers, Sage can also decompose any integer into its 
prime factors, as described by the Fundamental Theorem of Arithmetic (Theorem 2.15). 


So 2600 = 2? x 5* x 13 and this is the unique way to write 2600 as a product of prime numbers (other than rearranging the order 
of the primes themselves in the product). 


While Sage will print a factorization nicely, it is carried internally as a list of pairs of integers, with each pair being a base (a prime 
number) and an exponent (a positive integer). Study the following carefully, as it is another good exercise in working with Sage 
output in the form of lists. 


The next compute cell reveals the internal version of the factorization by asking for the actual list. And we show how you could 
determine exactly how many terms the factorization has by using the length command, len() . 
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Can you extract the next two primes, and their exponents, from a ? 
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2.8: Sage Exercises 


These exercises are about investigating basic properties of the integers, something we will frequently do when investigating groups. 
Sage worksheets have extensive capabilities for making new cells with carefully formatted text, include support for LaTeX syntax 
to express mathematics. So when a question asks for explanation or commentary, make a new cell and communicate clearly with 
your audience. 


Use the next _prime() command to construct two different 8-digit prime numbers and save them in variables named a 
and b. 


Use the .isS_prime() method to verify that your primes a and Db are really prime. 
Verify that 1 is the greatest common divisor of your two primes from the previous exercises. 
Find two integers that make a “linear combination” of your two primes equal to 1. Include a verification of your result. 


Determine a factorization into powers of primes for c = 4 598 037 234. 


E 
fa 
c 
fz 
Ez 


Write a compute cell that defines the same value of Cc again, and then defines a candidate divisor of Cc named d . The 
third line of the cell should return True if andonlyif cd isadivisorof c . Illustrate the use of your cell by testing your 
code with d=7 and ina new copy of the cell, testing your code with d = 11. 
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CHAPTER OVERVIEW 


3: Groups 


We begin our study of algebraic structures by investigating sets associated with single operations that satisfy certain reasonable 
axioms; that is, we want to define an operation on a set in a way that will generalize such familiar structures as the integers Z 
together with the single operation of addition, or invertible 2 x 2 matrices together with the single operation of matrix 
multiplication. The integers and the 2 x 2 matrices, together with their respective single operations, are examples of algebraic 
structures known as groups. 


The theory of groups occupies a central position in mathematics. Modern group theory arose from an attempt to find the roots of a 
polynomial in terms of its coefficients. Groups now play a central role in such areas as coding theory, counting, and the study of 
symmetries; many areas of biology, chemistry, and physics have benefited from group theory. 

3.4: Reading Questions 

3.5: Exercises 

3.6: Additional Exercises- Detecting Errors 

3.7: References and Suggested Readings 

3.8: Sage 

3.9: Sage Exercises 

3.1: Integer Equivalence Classes and Symmetries 

3.2: Definitions and Examples 

3.3: Subgroups 
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3.4: Reading Questions 
In the group Zg compute, (a) 6 +7, and (b) 27?. 


In the group U(16) compute, (a) 5-7, and (b) 371. 

State the definition of a group. 

Explain a single method that will decide if a subset of a group is itself a subgroup. 
Explain the origin of the term “abelian” for a commutative group. 


Give an example of a group you have seen in your previous mathematical experience, but that is not an example in this chapter. 


?B 7B: 
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3.5: Exercises 


Find all z € Z satisfying each of the following equations. 


1.32=2 (mod 7) 
2.54+1=13 (mod 23) 
3.5a+1=13 (mod 26) 
4.9% =3 (mod 5) 
5.52=1 (mod 6) 
6.3x2=1 (mod 6) 


Which of the following multiplication tables defined on the set G = {a, b,c, d} form a group? Support your answer in 


each case. 

le ola bcd 
ala cda 
bj/b bc ad 
cle da b 
did abe 

2: 

33 

4. 


Write out Cayley tables for groups formed by the symmetries of a rectangle and for (Z4, +). How many elements are in 
each group? Are the groups the same? Why or why not? 


Describe the symmetries of a rhombus and prove that the set of symmetries forms a group. Give Cayley tables for both the 
symmetries of a rectangle and the symmetries of a rhombus. Are the symmetries of a rectangle and those of a rhombus the 
same? 
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Describe the symmetries of a square and prove that the set of symmetries is a group. Give a Cayley table for the 
symmetries. How many ways can the vertices of a square be permuted? Is each permutation necessarily a symmetry of the 
square? The symmetry group of the square is denoted by D4. 


Give a multiplication table for the group U(12). 
Let S =R \ {—1} and define a binary operation on S by axb=a+b-+ab. Prove that (5, *) is an abelian group. 
Give an example of two elements A and B in GL2(R) with AB ¢ BA. 


Prove that the product of two matrices in SZ2(IR) has determinant one. 


E 
ce 
gz 
c 
ec 


Prove that the set of matrices of the form 


is a group under matrix multiplication. This group, known as the Heisenberg group, is important in quantum physics. 
Matrix multiplication in the Heisenberg group is defined by 


lazy 1 2 y' 1 ata’ yty' +22! 
0 1 2z (Ola |e—s 0) 1 z+2' 
0 01 0 0 1 0 0 1 


Prove that det( AB) = det(A)det(B) in GL2(R). Use this result to show that the binary operation in the group GL2(R) 
is closed; that is, if A and B are in GLZ2(R), then AB € GL2(R). 


Let Z} = {(a1,@2,...,@n) : a; € Zp}. Define a binary operation on ZF by 
(a1, a2, sree , Qn) + (bj, be, Eee bn) — (a1 +b, a2 + be, 2029 On + bn). 
Prove that Z5 is a group under this operation. This group is important in algebraic coding theory. 


Show that R* = R \ {0} is a group under the operation of multiplication. 
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Given the groups R* and Z, let G = R* x Z. Define a binary operation o on G by (a, m) 0 (b, n) = (ab, m+n). Show 
that G is a group under this operation. 


Prove or disprove that every group containing six elements is abelian. 

Give a specific example of some group G and elements g, h € G where (gh)” 4 g”h”. 
Give an example of three different groups with eight elements. Why are the groups different? 
Show that there are n! permutations of a set containing n items. 


Show that 
0+a=a+0=a (mod n) 


foralla€ Z,. 


Prove that there is a multiplicative identity for the integers modulo n: 


a-l=a (mod n). 


For each a € Z,, find an element b € Z,, such that 


a+b=b+a=0 (mod n). 


Show that addition and multiplication mod n are well defined operations. That is, show that the operations do not depend 
on the choice of the representative from the equivalence classes mod n. 


Show that addition and multiplication mod n are associative operations. 


= 
ee 
= 
— 
i 
i 
: 
E 
fe 
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Show that multiplication distributes over addition modulo n: 


a(b+c)=ab+ac (mod n). 

Let a and b be elements in a group G. Prove that ab”a~! = (aba"!)” forn € Z. 

Let U(n) be the group of units in Z,. If n > 2, prove that there is an element k € U(n) such that k2 =1 andk #1. 
1 


Prove that the inverse of 9192 °°: Qn iS 9n # Gea ou GH ~e 


Prove the remainder of Proposition 3.21: if G is a group and a, b € G, then the equation xa = b has a unique solution in 


Prove Theorem 3.23. 


Prove the right and left cancellation laws for a group G; that is, show that in the group G, ba = ca implies b =c and 
ab = ac implies b = c for elements a,b, cE G. 


Show that if a? = e for all elements a in a group G, then G must be abelian. 
Show that if G is a finite group of even order, then there is an a € G such that a is not the identity and a? =e. 
Let G be a group and suppose that (ab)? = ab? for all a and b in G. Prove that G is an abelian group. 


Find all the subgroups of Z3 x Z3. Use this information to show that Z3 x Z3 is not the same group as Zg. (See Example 
3.28 for a short description of the product of groups.) 


- 
, 
= 
c 
5 
wa 
E 
= 
: 
: 
E 
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Find all the subgroups of the symmetry group of an equilateral triangle. 
Compute the subgroups of the symmetry group of a square. 
Let H = {2":k € Z}. Show that H is a subgroup of Q*. 


Let n=0,1,2,...andnZ={nk:k€ Z}. Prove that nZ is a subgroup of Z. Show that these subgroups are the only 
subgroups of Z. 


Let T= {z€C*: |z| =1}. Prove that T is a subgroup of C’. 
Let G consist of the 2 x 2 matrices of the form 
cos? —sin@ 
sind cos@ /’ 
where @ € R. Prove that G is a subgroup of SZ2(R). 


Prove that 
G= {a+by/2: a,b € Qandaand bare not both zero} 


is a subgroup of R* under the group operation of multiplication. 
Let G be the group of 2 x 2 matrices under addition and 
b 
H= Ne ) a+d=oh, 
c d 
Prove that H is a subgroup of G. 


Prove or disprove: SL2(Z), the set of 2 x 2 matrices with integer entries and determinant one, is a subgroup of SZ2(R). 


List the subgroups of the quaternion group, Qs. 


S 
: 
E 
P 
- 
: 
. 
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Prove that the intersection of two subgroups of a group G is also a subgroup of G. 
Prove or disprove: If H and K are subgroups of a group G, then HU K is a subgroup of G. 


Prove or disprove: If H and K are subgroups of a group G, then HK = {hk:h © Handk ec K} is a subgroup of G. 
What if G is abelian? 


Let G bea group and g € G. Show that 
Z(G) = {a €G: gz = xg forall g < G} 


is a subgroup of G. This subgroup is called the center of G. 

Let a and b be elements of a group G. If a*b = ba and a? = e, prove that ab = ba. 
Give an example of an infinite group in which every nontrivial subgroup is infinite. 
If zy =a ly! forall x and y in G, prove that G must be abelian. 

Prove or disprove: Every proper subgroup of a nonabelian group is nonabelian. 


Let H be a subgroup of G and 
C(A) ={9€G: gh=hgforallh € H}. 
Prove C'(#) is a subgroup of G. This subgroup is called the centralizer of H in G. 


Let H be a subgroup of G. If g € G, show that gHg-! ={ghg 1: h € H} isalsoa subgroup of G. 


tH? GBB :B BB: iB abe 
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3.6: Additional Exercises- Detecting Errors 


? 1. UPC Symbols 


Universal Product Code (UPC) symbols are found on most products in grocery and retail stores. The UPC symbol is a 12- 
digit code identifying the manufacturer of a product and the product itself (Figure 3.32). The first 11 digits contain information 
about the product; the twelfth digit is used for error detection. If dd --- dz is a valid UPC number, then 


3-d)+1-d2+3-d3+---+3-dj,+1-dj2=0 (mod 10). 


1. Show that the UPC number 0-50000-30042-6, which appears in Figure 3.32, is a valid UPC number. 

2. Show that the number 0-50000-30043-6 is not a valid UPC number. 

3. Write a formula to calculate the check digit, dj2, in the UPC number. 

4. The UPC error detection scheme can detect most transposition errors; that is, it can determine if two digits have been 
interchanged. Show that the transposition error 0-05000-30042-6 is not detected. Find a transposition error that is detected. 
Can you find a general rule for the types of transposition errors that can be detected? 

5. Write a program that will determine whether or not a UPC number is valid. 


) 90000 © 30042 6 


Figure 3.32: A UPC code 


It is often useful to use an inner product notation for this type of error detection scheme; hence, we will use the notion 


(d,,dz,...,dx)- (wi, wa,..., we) =0 (mod n) 


to mean 

djw; +dyw2+---+d,w,=0 (mod n). 
Suppose that (d,,d2,...,d,)- (wi, w2,..., Wz) =0 (mod n) is an error detection scheme for the k-digit identification 
number djd2---d,, where 0 <d; <n. Prove that all single-digit errors are detected if and only if gcd(w;,n)=1 for 
MSU Sks 
Let (d1, d2,...,d,)- (wi, w2,-.., We) =0 (mod n) be an error detection scheme for the k-digit identification number 


didz---dx, where 0 <d; <n. Prove that all transposition errors of two digits d; and d; are detected if and only if 
gcd(w; —w;,) =1 fori and j between 1 and k. 


? 4. ISBN Codes 


Every book has an International Standard Book Number (ISBN) code. This is a 10-digit code indicating the book's publisher 
and title. The tenth digit is a check digit satisfying 


(di, do, ettetre , dio) : (10, 9, ooog 1) =0 (mod ill). 


One problem is that djg might have to be a 10 to make the inner product zero; in this case, 11 digits would be needed to make 
this scheme work. Therefore, the character X is used for the eleventh digit. So ISBN 3-540-96035-X is a valid ISBN code. 


1. Is ISBN 0-534-91500-0 a valid ISBN code? What about ISBN 0-534-91700-0 and ISBN 0-534-19500-0? 
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2. Does this method detect all single-digit errors? What about all transposition errors? 
3. How many different ISBN codes are there? 
4. Write a computer program that will calculate the check digit for the first nine digits of an ISBN code. 
5. A publisher has houses in Germany and the United States. Its German prefix is 3-540. If its United States prefix will be 0- 
abc ,find abc such that the rest of the ISBN code will be the same for a book printed in Germany and in the United 
States. Under the ISBN coding method the first digit identifies the language; German is 3 and English is 0. The next group 
of numbers identifies the publisher, and the last group identifies the specific book. 
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3.8: Sage 


Many of the groups discussed in this chapter are available for study in Sage. It is important to understand that sets that form 
algebraic objects (groups in this chapter) are called “parents” in Sage, and elements of these objects are called, well, “elements.” So 
every element belongs to a parent (in other words, is contained in some set). We can ask about properties of parents (finite? order? 
abelian?), and we can ask about properties of individual elements (identity? inverse?). In the following we will show you how to 
create some of these common groups and begin to explore their properties with Sage. 


Integers mod n 


We would like to work with elements of ZS .If you were to typea 6 into a compute cell right now, what would you mean? The 
integer 6, the rational number S, the real number 6.00000, or the complex number 6.00000 + 0.000002 7?Or perhaps you really do 
want the integer 6 mod 8? Sage really has no idea what you mean or want. To make this clear, you can “coerce” 6 into Z8 
with the syntax Z8(6) . Without this, Sage will treat a input number like 6 as an integer, the simplest possible interpretation in 
some sense. Study the following carefully, where we first work with “normal” integers and then with integers mod 8. 


Z8 isa bit unusual as a first example, since it has two operations defined, both addition and multiplication, with addition forming 
a group, and multiplication not forming a group. Still, we can work with the additive portion, here forming the Cayley table for the 
addition. 


When n is a prime number, the multipicative structure (excluding zero), will also form a group. 


The integers mod n are very important, so Sage implements both addition and multiplication together. Groups of symmetries are a 
better example of how Sage implements groups, since there is just one operation present. 


Groups of symmetries 


The symmetries of some geometric shapes are already defined in Sage, albeit with different names. They are implemented as 
“permutation groups” which we will begin to study carefully in Chapter 5. 


Sage uses integers to label vertices, starting the count at 1 , instead of letters. Elements by default are printed using “cycle 
notation” which we will see described carefully in Chapter 5. Here is an example, with both the mathematics and Sage. For the 
Sage part, we create the group of symmetries and then create the symmetry p2 with coercion, followed by outputting the element in 
cycle notation. Then we create just the bottom row of the notation we are using for permutations. 


(A B C\ (1 2 3 
M“\o AB) \3 1 2 
The final list comprehension deserves comment. The .domain() method gives a list of the symbols used for the permutation 


group triangle andthen rho2_ is employed with syntax like it is a function (it is a function) to create the images that 
would occupy the bottom row. 


With a double list comprehension we can list all six elements of the group in the “bottom row” format. A good exercise would be to 
pair up each element with its name as given in Figure 3.6. 


Different books, different authors, different software all have different ideas about the order in which to write multiplication of 
functions. This textbook builds on the idea of composition of functions, so that fg is the composition (fg)(x) = f(g(x)) and it is 
natural to apply g first. Sage takes the opposite view and since we write fg, Sage will understand that we want to do f first. 
Neither approach is wrong, and neither is necessarily superior, they are just different and there are good arguments for either one. 
When you consult other books that work with permutation groups, you want to first determine which approach it takes. (Be aware 
that this discussion of Sage function composition is limited to permutations only—“regular” functions in Sage compose in the 
order you might be familiar with from a calculus course.) 


The translation here between the text and Sage will be worthwhile practice. Here we will reprise the discussion at the end of 
Section 3.1, but reverse the order on each product to compute Sage-style and exactly mirror what the text does. 


Now that we understand that Sage does multiplication in reverse, we can compute the Cayley table for this group. Default behavior 
is to just name elements of a group as letters, a, 6, C ,... in the same order that the .1ist() command would produce 
the elements of the group. But you can also print the elements in the table as themselves (that uses cycle notation here), or you can 
give the elements names. We will use U as shorthand for ys and r as shorthand for p. 
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You should verify that the table above is correct, just like Table 3.2 is correct. Remember that the convention is to multiply a row 
label times a column label, in that order. However, to do a check across the two tables, you will need to recall the difference in 
ordering between your textbook and Sage. 


Quaternions 


Sage implements the quaternions, but the elements are not matrices, but rather are permutations. Despite appearances the structure 
is identical. It should not matter which version you have in mind (matrices or permutations) if you build the Cayley table and use 
the default behavior of using letters to name the elements. As permutations, or as letters, can you identify —1, I, J and K? 


It should be fairly obvious that a is the identity element of the group (1), either from its behavior in the table, or from its “bottom 
row” representation as the first element of the list above. And if you prefer, you can ask Sage for a list of its outputs when viewed 
as a function. 


Now —1 should have the property that —1-—1 = 1. We see that the identity element a is on the diagonal of the Cayley table 
only when we compute cd*d . We can verify this easily, borrowing the fourth “bottom row” element from the list above. With this 
information, once we locate J, we can easily compute —I, and so on. 


See if you can pair up the letters with all eight elements of the quaternions. Be a bit careful with your names, the symbol I is 

used by Sage for the imaginary number i = /—1 (which we will use below), but Sage will silently let you redefine it to be 

anything you like. Same goes for using lower-case i in Sage. So call your elements of the quaternions something like 
QT, QJ, QK to avoid confusion. 


As we begin to work with groups it is instructive to work with the actual elements. But many properties of groups are totally 
independent of the order we use for multiplication, or the names or representations we use for the elements. Here are facts about the 
quaternions we can compute without any knowledge of just how the elements are written or multiplied. 


Subgroups 


The best techniques for creating subgroups will come in future chapters, but we can create some groups that are naturally 
subgroups of other groups. 


Elements of the quaternions were represented by certain permutations of the integers 1 through 8. We can also build the group of 
all permutations of these eight integers. It gets pretty big, so do not list it unless you want a lot of output! (I dare you.) 


The quaternions, Q , is a subgroup of the full group of all permutations, the symmetric group Sg or S8 , and Sage regards this as 
a property of Q . 


In Sage the complex numbers are known by the name CC . We can create a list of the elements in the subgroup described in 
Example 3.16. Then we can verify that this set is a subgroup by examining the Cayley table, using multiplication as the operation. 


This page titled 3.8: Sage is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or curated by Thomas 
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3.9: Sage Exercises 


These exercises are about becoming comfortable working with groups in Sage. Sage worksheets have extensive capabilities for 
making new cells with carefully formatted text, include support for LaTeX syntax to express mathematics. So when a question asks 
for explanation or commentary, make a new cell and communicate clearly with your audience. 


Create the groups CyclicPermutationGroup(8) and DihedralGroup(4) andname these groups C and D , 
respectively. We will understand these constructions better shortly, but for now just understand that both objects you create are 
actually groups. 


Check that C and D_ have the same size by using the .order() method. Determine which group is abelian, and which 
is not, by using the .is_abelian() method. 


Use the .cayley_table() method to create the Cayley table for each group. 


Write a nicely formatted discussion identifying differences between the two groups that are discernible in properties of their 
Cayley tables. In other words, what is different about these two groups that you can “see” in the Cayley tables? (In the Sage 
notebook, a Shift-click on a blue bar will bring up a mini-word-processor, and you can use use dollar signs to embed 
mathematics formatted using TeX syntax.) 


For C_ locate the one subgroup of order 4. The group D_ has three subgroups of order 4. Select one of the three subgroups 
of D_ that has a different structure than the subgroup you obtained from C . 


The .subgroups() method will give you a list of all of the subgroups to help you get started. A Cayley table will help 
you tell the difference between the two subgroups. What properties of these tables did you use to determine the difference in 
the structure of the subgroups? 


The .subgroup(elt list) method of a group will create the smallest subgroup containing the specified elements of 
the group, when given the elements as a list elt list . Use this command to discover the shortest list of elements 
necessary to recreate the subgroups you found in the previous exercise. The equality comparison, == , can be used to test if 
two subgroups are equal. 


This page titled 3.9: Sage Exercises is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or curated by 
Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the LibreTexts 
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3.1: Integer Equivalence Classes and Symmetries 


Let us now investigate some mathematical structures that can be viewed as sets with single operations. 


The Integers mod n 


The integers mod n have become indispensable in the theory and applications of algebra. In mathematics they are used in 
cryptography, coding theory, and the detection of errors in identification codes. 


We have already seen that two integers a and b are equivalent mod n if n divides a — b. The integers mod n also partition Z into n 
different equivalence classes; we will denote the set of these equivalence classes by Z,,. Consider the integers modulo 12 and the 
corresponding partition of the integers: 


(sy dy 
(1] ={..., 11,1, 13, 25,...}, 


[11] ={...,—1,11, 23, 35,...}. 


When no confusion can arise, we will use 0,1,...,11to indicate the equivalence classes [0], [1],..., [11]respectively. We can do 
arithmetic on Z,,. For two integers a and 6, define addition modulo n to be (a+b) (mod n); that is, the remainder when a+ b is 
divided by n. Similarly, multiplication modulo n is defined as (ab) (mod n), the remainder when ab is divided by n. 


The following examples illustrate integer arithmetic modulo n: 

7+4=1 (mod 5) 7-3 =1 (mod 5) 
3+5=0 (mod 8) 3-5 =7 (mod 8) 
3+4=7 (mod 12) 3-4 =0 (mod 12). 


Solution 


In particular, notice that it is possible that the product of two nonzero numbers modulo n can be equivalent to 0 modulo n. 


Y Example \3.2\) 


Most, but not all, of the usual laws of arithmetic hold for addition and multiplication in Z,,. For instance, it is not necessarily 
true that there is a multiplicative inverse. Consider the multiplication table for Zg in Figure 3.3. 


Solution 


Notice that 2, 4, and 6 do not have multiplicative inverses; that is, for n =2, 4, or 6, there is no integer & such that 


kn =1 (mod 8). 

012 3 4 5 6 7 
0/0 00 00 0 0 0 
1/0 12 3 4 5 6 7 
21/0 2 4 6 0 2 4 6 
3/0 3 6 14 7 2 5 
4};0 40 40 4 0 4 
5/0 5 2 7 4 1 6 8 
6/0 6 4 2 0 6 4 2 
710 765 43 2 1 


\(Figure \text { } 3.3\). Multiplication table for Zg 
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& Proposition 3.4 


Let Z,, be the set of equivalence classes of the integers mod n and a, b,c € Zp. 


1. Addition and multiplication are commutative: 


a+b=b+a (mod n) 
ab=ba (mod n). 


2. Addition and multiplication are associative: 


(a+b)+ce =a+(b+c) (mod n) 
(ab)c =a(bc) (mod n). 


3. There are both additive and multiplicative identities: 


a+0=a (mod n) 
a-1=a (mod n). 


4. Multiplication distributes over addition: 
a(b+c)=ab+ac (mod n). 
5. For every integer a there is an additive inverse —a: 
a+(—a)=0 (mod n). 


6. Let a be a nonzero integer. Then gcd(a, n) = 1 if and only if there exists a multiplicative inverse b fora (mod n); that is, 
a nonzero integer b such that 


ab=1 (mod n). 
Proof 


We will prove (1) and (6) and leave the remaining properties to be proven in the exercises. 


(1) Addition and multiplication are commutative modulo n since the remainder of a+ 6 divided by n is the same as the 
remainder of b+ a divided by n. 


(6) Suppose that gcd(a,n) =1. Then there exist integers r and s such that ar-+ns=1. Since ns =1-—ar, it must be 
the case that ar =1 (mod n). Letting b be the equivalence class of r, ab =1 (mod n). 


Conversely, suppose that there exists an integer b such that ab = 1 (mod n). Then n divides ab —1, so there is an integer 
k such that ab —nk =1. Let d= gcd(a,n). Since d divides ab —nk, d must also divide 1; hence, d = 1. 


Symmetries 
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Figure 3.5. Rigid motions of a rectangle 


A symmetry of a geometric figure is a rearrangement of the figure preserving the arrangement of its sides and vertices as well as its 
distances and angles. A map from the plane to itself preserving the symmetry of an object is called a rigid motion. For example, if 
we look at the rectangle in Figure 3.5, it is easy to see that a rotation of 180° or 360° returns a rectangle in the plane with the same 
orientation as the original rectangle and the same relationship among the vertices. A reflection of the rectangle across either the 
vertical axis or the horizontal axis can also be seen to be a symmetry. However, a 90° rotation in either direction cannot be a 
symmetry unless the rectangle is a square. 
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Figure 3.6. Symmetries of a triangle 


Let us find the symmetries of the equilateral triangle A ABC. To find a symmetry of A ABC, we must first examine the 
permutations of the vertices A, B, and C' and then ask if a permutation extends to a symmetry of the triangle. Recall that a 
permutation of a set S is a one-to-one and onto map 7: S —> S. The three vertices have 3! = 6 permutations, so the triangle has at 
most six symmetries. To see that there are six permutations, observe there are three different possibilities for the first vertex, and 
two for the second, and the remaining vertex is determined by the placement of the first two. So we have 3-2-1=3!=6 

different arrangements. To denote the permutation of the vertices of an equilateral triangle that sends A to B, B to C, and C to A, 


we write the array 
ABC 
BC Aj)’ 


Notice that this particular permutation corresponds to the rigid motion of rotating the triangle by 120° in a clockwise direction. In 
fact, every permutation gives rise to a symmetry of the triangle. All of these symmetries are shown in Figure 3.6. 


A natural question to ask is what happens if one motion of the triangle A ABC is followed by another. Which symmetry is 41/1; 
that is, what happens when we do the permutation p; and then the permutation 4? Remember that we are composing functions 
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here. Although we usually multiply left to right, we compose functions right to left. We have 


(11p1)(A) = p1(p1(A)) = 41 (B) = C 
(41P1)(B) = 11 (p1(B)) = (C) = B 
(uip1)(C) = #1 (p1(C)) = 41 (A) = A. 


This is the same symmetry as /t2. Suppose we do these motions in the opposite order, p; then 11. It is easy to determine that this is 
the same as the symmetry fu3; hence, p14; 4 4191- A multiplication table for the symmetries of an equilateral triangle A ABC is 
given in Figure 3.7. 


Notice that in the multiplication table for the symmetries of an equilateral triangle, for every motion of the triangle a there is 
another motion 8 such that a8 = id; that is, for every motion there is another motion that takes the triangle back to its original 
orientation. 


\(Figure \text { } 3.7\). Symmetries of an equilateral triangle 


This page titled 3.1: Integer Equivalence Classes and Symmetries is shared under a GNU Free Documentation License 1.3 license and was 
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3.2: Definitions and Examples 


The integers mod n and the symmetries of a triangle or a rectangle are examples of groups. A binary operation or law of 
composition on a set G is a function G x G > G that assigns to each pair (a,b) € Gx G a unique element aob, or ab in G, 
called the composition of a and b. A group (G,,o) is a set G together with a law of composition (a,b)++ aob that satisfies the 
following axioms. 


e The law of composition is associative. That is, 
(acb)oc=ao (boc) 
for a,b,c € G. 
e There exists an element e € G, called the identity element, such that for any element a € G 
eca=ace=a. 


¢ For each element a € G, there exists an inverse element in G, denoted by a, such that 


A group G with the property that aob=boa for all a,b €G is called abelian or commutative. Groups not satisfying this 
property are said to be nonabelian or noncommutative. 


vY Example 3.8 


The integers Z = {..., —1,0,1,2,...}form a group under the operation of addition. 
Solution 


The binary operation on two integers m,n © Z is just their sum. Since the integers under addition already have a well- 
established notation, we will use the operator + instead of 0; that is, we shall write m+n instead of mon. The identity is 0, 
and the inverse of n € Z is written as —n instead of n~!. Notice that the set of integers under addition have the additional 
property that m+n =n-+m and therefore form an abelian group. 


Most of the time we will write ab instead of ao b; however, if the group already has a natural operation such as addition in the 
integers, we will use that operation. That is, if we are adding two integers, we still write m-+n, —n for the inverse, and 0 for the 
identity as usual. We also write m —n instead of m + (—n). 


It is often convenient to describe a group in terms of an addition or multiplication table. Such a table is called a Cayley table. 


vY Example 3.9 


The integers mod n form a group under addition modulo n. Consider Zs, consisting of the equivalence classes of the integers 
0,1, 2,3, and 4. 

Solution 

We define the group operation on Zs by modular addition. We write the binary operation on the group additively; that is, we 
write m+n. The element 0 is the identity of the group and each element in Zs; has an inverse. For instance, 
2+3=3+4+2=0. Figure 3.10 is a Cayley table for Z;. By Proposition 3.4, Z, = {0,1,...,n—1} is a group under the 
binary operation of addition mod n. 


\(Figure \text { } 3.10.\) Cayley table for (Zs, +) 
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Not every set with a binary operation is a group. 
Solution 


For example, if we let modular multiplication be the binary operation on Z,,, then Z,, fails to be a group. The element 1 acts as 
a group identity since 1-k=k-1=k for any ke Z,; however, a multiplicative inverse for 0 does not exist since 
0-k=k-0=0 for every k in Z,. Even if we consider the set Z, \ {0}, we still may not have a group. For instance, let 
2 € Ze. Then 2 has no multiplicative inverse since 


0-2 =0 1-22 
2:2 =4 3:2=0 
4-2) =2 5:-2=4 


By Proposition 3.4, every nonzero k does have an inverse in Z, if k is relatively prime to n. Denote the set of all such nonzero 
elements in Z,, by U(n). Then U(n) is a group called the group of units of Z,,. Figure 3.12 is a Cayley table for the group 
U(8). 
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\(Figure \text { } 3.12.\) Multiplication table for U(8) 


The symmetries of an equilateral triangle described in Section 3.1 form a nonabelian group. 
Solution 


As we observed, it is not necessarily true that a8 = Ba for two symmetries @ and {. Using Figure 3.7, which is a Cayley table 
for this group, we can easily check that the symmetries of an equilateral triangle are indeed a group. We will denote this group 
by either $3 or D3, for reasons that will be explained later. 


vY Example 3.14 


We use M2(R) to denote the set of all 2 x 2 matrices. Let GL2(IR) be the subset of M2(R) consisting of invertible matrices; 


that is, a matrix 
A= ( 2 
c d 


is in GL, (R) if there exists a matrix A“! such that AA~' = A-'A=T, where J is the 2 x 2 identity matrix. 
Solution 


For A to have an inverse is equivalent to requiring that the determinant of A be nonzero; that is, det A=ad—bc#0. The 
set of invertible matrices forms a group called the general linear group. The identity of the group is the identity matrix 


(59) 


The inverse of A € GL2(R) is 
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The product of two invertible matrices is again invertible. Matrix multiplication is associative, satisfying the other group 
axiom. For matrices it is not true in general that AB = BA; hence, GL»(R) is another example of a nonabelian group. 


Let 
1 0 1 
0 1 —1 0 
(04) «(5 2). 
a1 0 0 -i 
where 72 = —1. 
Solution 


Then the relations 1° —J* —K*——1, fJ/ =k, JK =], Ki- J Ji ——k KJ ——i and ik — —J hold, The set 
Qs = {+1, +I, J, 4K} is a group called the quaternion group. Notice that Qs is noncommutative. 


vY Example 3.16 


Let C* be the set of nonzero complex numbers. Under the operation of multiplication C* forms a group. The identity is 1. If 
z=a-+bi is anonzero complex number, 


Solution 
then 


= a—bi 


— a+b 


is the inverse of z. It is easy to see that the remaining group axioms hold. 


A group is finite, or has finite order, if it contains a finite number of elements; otherwise, the group is said to be infinite or to have 
infinite order. The order of a finite group is the number of elements that it contains. If G is a group containing n elements, we 
write |G] =n. The group Z; is a finite group of order 5; the integers Z form an infinite group under addition, and we sometimes 
write |Z| = oo. 


Basic Properties of Groups 


& Proposition 3.17 


The identity element in a group G is unique; that is, there exists only one element e € G such that eg = ge = g forallgéG. 


Proof 


Suppose that e and e’ are both identities in G. Then eg = ge =g and e’g=ge' =g forall g€ G. We need to show that 
e=e’. If we think of e as the identity, then ee’ = e’; but if e’ is the identity, then ee’ = e. Combining these two equations, 
we have e = ee’ =e’. 


Inverses in a group are also unique. If g’ and g” are both inverses of an element g in a group G, then gg’ =g’g=e and 
gg’ = g"'g=e. We want to show that g’ = g”, but g’ =g’e =g'(gg") = (g'9)g" =eg"” =g". We summarize this fact in the 
following proposition. 


& Proposition 3.18 


If g is any element in a group G, then the inverse of g, denoted by g', is unique 
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& Proposition 3.19 


Let G be a group. If a,b € G, then (ab)-! = b-1a}. 


Proof 


Let a,b € G. Then abb-!a~! = aea“! = aa“! =e. Similarly, b-1a~!ab =e. But by the previous proposition, inverses 
are unique; hence, (ab)! =b-ta?. 


& Proposition 3.20 


Let G be a group. For anya € G, (a-')"1 =a. 


Proof 


Observe that a '(a-+)~! =e. Consequently, multiplying both sides of this equation by a, we have 


It makes sense to write equations with group elements and group operations. If a and b are two elements in a group G, does 
there exist an element x € G such that az = b? If such an x does exist, is it unique? The following proposition answers both 
of these questions positively. 


& Proposition 3.21 


Let G be a group and a and b be any two elements in G. Then the equations az = b and xa = b have unique solutions in 


G. 


Proof 


Suppose that az —b. We must show that such an x exists. We can multiply both sides of az =b by a“! to find 


lar =a ‘b. 


f= =O 
To show uniqueness, suppose that x, and z2 are both solutions of az=b; then az;=b=azx. So 


21 =a ‘az, =a tax, =22. The proof for the existence and uniqueness of the solution of za = b is similar. 


& Proposition 3.22 


If G is a group and a, b,c € G, then ba = ca implies b =c and ab = ac implies \(b = c\text{.}\ 


This proposition tells us that the right and left cancellation laws are true in groups. We leave the proof as an exercise. 
We can use exponential notation for groups just as we do in ordinary algebra. If G is a group and g € G, then we define 


g®° =e. Forn€N, we define 


g°=9'9°°°9 


n times 


and 


n times 


& Theorem 3.23 


In a group, the usual laws of exponents hold; that is, for all g, kh € G, 


Lg™g’ =g™* forall m,n ce Z; 
2.(g”)" =g”” for all m,n € Z; 
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| 3. (gh)"” =(h 1g 1) ™ forall n € Z. Furthermore, if G is abelian, then (gh)" = g"h". 


We will leave the proof of this theorem as an exercise. Notice that (gh)” # g"h" in general, since the group may not be 
abelian. If the group is Z or Z,,, we write the group operation additively and the exponential operation multiplicatively; 
that is, we write ng instead of g”. The laws of exponents now become 


1.mg+ng=(m+n)g forallm,ne Z; 
2.m(ng) =(mn)qg for all m,n € Z; 
3.m(g+h)=mg+mh foralln€ Z. 


It is important to realize that the last statement can be made only because Z and Z,, are commutative groups. 


Historical Note 


Although the first clear axiomatic definition of a group was not given until the late 1800s, group-theoretic methods had 
been employed before this time in the development of many areas of mathematics, including geometry and the theory of 
algebraic equations. 


Joseph-Louis Lagrange used group-theoretic methods in a 1770-1771 memoir to study methods of solving polynomial 
equations. Later, Evariste Galois (1811-1832) succeeded in developing the mathematics necessary to determine exactly 
which polynomial equations could be solved in terms of the coefficients of the polynomial. Galois' primary tool was group 
theory. 


The study of geometry was revolutionized in 1872 when Felix Klein proposed that geometric spaces should be studied by 
examining those properties that are invariant under a transformation of the space. Sophus Lie, a contemporary of Klein, 
used group theory to study solutions of partial differential equations. One of the first modern treatments of group theory 
appeared in William Burnside's The Theory of Groups of Finite Order [1], first published in 1897. 
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3.3: Subgroups 
Definitions and Examples 


Sometimes we wish to investigate smaller groups sitting inside a larger group. The set of even integers 2Z = {..., —2,0,2,4,...} 
is a group under the operation of addition. This smaller group sits naturally inside of the group of integers under addition. We 
define a subgroup H of a group G to be a subset H of G such that when the group operation of G is restricted to H, H is a group 
in its own right. Observe that every group G with at least two elements will always have at least two subgroups, the subgroup 
consisting of the identity element alone and the entire group itself. The subgroup H = {e} of a group G is called the trivial 
subgroup. A subgroup that is a proper subset of G is called a proper subgroup. In many of the examples that we have investigated 
up to this point, there exist other subgroups besides the trivial and improper subgroups. 


Y Example 3.24 


Consider the set of nonzero real numbers, R*, with the group operation of multiplication. The identity of this group is 1 and 
the inverse of any element a € R* is just 1/a. We will show that 


Q ={p/q: pandqare nonzero integers} 
is a subgroup of R*. 
Solution 


The identity of IR* is 1; however, 1 = 1/1 is the quotient of two nonzero integers. Hence, the identity of R* is in Q*. Given 
two elements in Q*, say p/qand r/s, their product pr/qs is also in Q*. The inverse of any element p/g € Q* is again in Q* 
since (p/q)~! = q/p. Since multiplication in R* is associative, multiplication in Q* is associative. 


Recall that C* is the multiplicative group of nonzero complex numbers. Let H = {1, —1,7, —i}. 
Solution 


Then 4 is a subgroup of C%*. It is quite easy to verify that H is a group under multiplication and that H Cc C*. 


vY Example 3.26 


Let SL (R) be the subset of GLZ2(R) consisting of matrices of determinant one; that is, a matrix 


( ) 
c d 
is in SL2 (R) exactly when ad — bc = 1. 


Solution 


To show that SZ2(IR) is a subgroup of the general linear group, we must show that it is a group under matrix multiplication. 
The 2 x 2 identity matrix is in SZ2(R), as is the inverse of the matrix A: 


ees) 
a 163 a / 


It remains to show that multiplication is closed; that is, that the product of two matrices of determinant one also has 
determinant one. We will leave this task as an exercise. The group SL2(R) is called the special linear group. 


It is important to realize that a subset H of a group G can be a group without being a subgroup of G. 


Solution 
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For H to be a subgroup of G, it must inherit the binary operation of G. The set of all 2 x 2 matrices, M2(IR), forms a group 
under the operation of addition. The 2x2 general linear group is a subset of M2(IR) and is a group under matrix 
multiplication, but it is not a subgroup of M)(R). If we add two invertible matrices, we do not necessarily obtain another 


invertible matrix. Observe that 
1 0 —1 0 0 0 
G 4G eG as 


but the zero matrix is not in GZ2(R). 


vY Example 2.28 


One way of telling whether or not two groups are the same is by examining their subgroups. Other than the trivial subgroup 
and the group itself, the group Z,4 has a single subgroup consisting of the elements 0 and 2. 


Solution 


From the group Zz, we can form another group of four elements as follows. As a set this group is Z, x Z2. We perform the 
group operation coordinatewise; that is, (a,b)+ (c,d) =(a+c,b+d). Figure 3.29 is an addition table for Zz x Zz. Since 
there are three nontrivial proper subgroups of Z.xZ j, H,={(0,0),(0,1)}, H2={(0,0),(1,0)}, and 
HA = {(0,0), (1, 1)}, Z4 and Z2 x Z_ must be different groups. 


\(Figure \text { } 3.29\). Addition table for Zz x Ze 


Some Subgroup Theorems 


Let us examine some criteria for determining exactly when a subset of a group is a subgroup. 


& Proposition 3.30 


A subset H of G is a subgroup if and only if it satisfies the following conditions. 


1. The identity e of G is in H. 
De If hi, ha © H, then hyho € H. 
Siph © them ne cere 


Proof 


First suppose that H is a subgroup of G. We must show that the three conditions hold. Since H is a group, it must have an 
identity ey. We must show that ex =e, where e is the identity of G. We know that eyey=eyg and that 
eey =eye=ey; hence, eey =eyey. By right-hand cancellation, e=ey. The second condition holds since a 
subgroup H is a group. To prove the third condition, let h € H. Since H is a group, there is an element h’ € H such that 
hh! = h'h =e. By the uniqueness of the inverse in G, h’ = h7!. 


Conversely, if the three conditions hold, we must show that H is a group under the same operation as G; however, these 
conditions plus the associativity of the binary operation are exactly the axioms stated in the definition of a group. 


& Proposition 3.31 


Let H be a subset of a group G. Then H is a subgroup of G if and only if H 40, and whenever g,h € H then gh~! is in H. 


Proof 
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First assume that H is a subgroup of G. We wish to show that gh! € H whenever g and hare in H. Since h is in H, its 
inverse h~! must also be in H. Because of the closure of the group operation, gh! € H. 


Conversely, suppose that H C G such that H #@ and gh"! € H whenever g,h € H. If ge H, then gg"! =e is in H. If 
g © H, then eg! =g~ is also in H. Now let hi, ho € H. We must show that their product is also in H. However, 
hy(hy!)* = hy hy € H. Hence, H is a subgroup of G. 


This page titled 3.3: Subgroups is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or curated by 
Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the LibreTexts 
platform; a detailed edit history is available upon request. 


GNU Free Documentation License https ://math.libretexts.org/@go/page/81042 


Oibretexts” 
CHAPTER OVERVIEW 


4: Cyclic Groups 
The groups Z and Z,,, which are among the most familiar and easily understood groups, are both examples of what are called 
cyclic groups. In this chapter we will study the properties of cyclic groups and cyclic subgroups, which play a fundamental part in 
the classification of all abelian groups. 

4.1: Cyclic Subgroups 

4.2: Multiplicative Group of Complex Numbers 

4.3: The Method of Repeated Squares 

4.4: Reading Questions 

4.5: Exercises 

4.6: Programming Exercises 

4.7: References and Suggested Readings 

4.8: Sage 

4.9: Sage Exercises 
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4.1: Cyclic Subgroups 


Often a subgroup will depend entirely on a single element of the group; that is, knowing that particular element will allow us to 
compute any other element in the subgroup. 


Y Example 4.1 


Suppose that we consider 3 € Z and look at all multiples (both positive and negative) of 3. As a set, this is 
3Z ={...,—3,0,3,6,...}. 
Solution 


It is easy to see that 3Z is a subgroup of the integers. This subgroup is completely determined by the element 3 since we can 
obtain all of the other elements of the group by taking multiples of 3. Every element in the subgroup is “generated” by 3. 


~ Example 4.2 


If H = {2": ne Z}, 
Solution 


then H is a subgroup of the multiplicative group of nonzero rational numbers, Q*. If a=2™ and b= 2” are in H, then 
ab-} =2™2-" —2™"” is also in H. By Proposition 3.31, H is a subgroup of Q* determined by the element 2. 


& Theorem 4.3 


Let G be a group and a be any element in G. Then the set 
(a) ={a" ke Z} 
is a subgroup of G. Furthermore, (a) is the smallest subgroup of G that contains a. 


Proof 


The identity is in (a) since a? =e. If g and h are any two elements in (a), then by the definition of (a) we can write 


g=a™ andh=a” for some integers m and n. So gh =a™a" =a™*” is again in (a). Finally, if g=a” in (a), then 
the inverse g-! =a~” is also in (a). Clearly, any subgroup H of G containing a must contain all the powers of a by 
closure; hence, H contains (a). Therefore, (a) is the smallest subgroup of G containing a. 


For a € G, we call (a) the cyclic subgroup generated by a. If G contains some element a such that G = (a), then G is a cyclic 
group. In this case a is a generator of G. If a is an element of a group G, we define the order of a to be the smallest positive 
integer n such that a” =e, and we write |a| =n. If there is no such integer n, we say that the order of a is infinite and write 
|a| =o to denote the order of a. 


vw Example 4.1.1 


Notice that a cyclic group can have more than a single generator. Both 1 and 5 generate Zg; 
Solution 


hence, Zg¢ is a cyclic group. Not every element in a cyclic group is necessarily a generator of the group. The order of 2 € Ze is 
3. The cyclic subgroup generated by 2 is (2) = {0, 2, 4}. 


The groups Z and Z,, are cyclic groups. The elements 1 and —1 are generators for Z. We can certainly generate Z,, with 1 although 
there may be other generators of Z,,, as in the case of Zg. 
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wY Example 4.6 


The group of units, U(9), in Zyg is a cyclic group. 

Solution 

Asa set, U(9) is {1, 2, 4,5, 7, 8}.The element 2 is a generator for U(9) since 
2°=2 2?=4 
2S ee — 7 
P=5 = 


vY Example 4.7 


Not every group is a cyclic group. Consider the symmetry group of an equilateral triangle $3. The multiplication table for this 
group is Figure 3.7. 


Solution 
The subgroups of $3 are shown in Figure 4.8. Notice that every subgroup is cyclic; however, no single element generates the 


entire group. 


S3 
{id, pr, p2}{id, pa} {id, 2} {id, 3 } 


{id} 


Figure 4.8. Subgroups of $3 


& Theorem 4.9 


Every cyclic group is abelian. 


Proof 
Let G be a cyclic group and a € G be a generator for G. If g and h are in G, then they can be written as powers of a, say 
g=a’" andh=a’. Since 

Tr+s 


ns eRe a ar 
gh =a'a’ =a a ava” = hg, 


G is abelian. 


Subgroups of Cyclic Groups 


We can ask some interesting questions about cyclic subgroups of a group and subgroups of a cyclic group. If G is a group, which 
subgroups of G are cyclic? If G is a cyclic group, what type of subgroups does G possess? 


& Theorem 4.10 


Every subgroup of a cyclic group is cyclic. 


Proof 
The main tools used in this proof are the division algorithm and the Principle of Well-Ordering. Let G be a cyclic group 
generated by a and suppose that H is a subgroup of G. If H = {e}, then trivially H is cyclic. Suppose that H contains 
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some other element g distinct from the identity. Then g can be written as a” for some integer n. Since H is a subgroup, 


gt =a must also be in H. Since either n or —n is positive, we can assume that H contains positive powers of a and 
n > 0. Let m be the smallest natural number such that a” € H. Such an m exists by the Principle of Well-Ordering. 


We claim that h =a™ is a generator for H. We must show that every h’ € H can be written as a power of h. Since 
h! € H and H isa subgroup of G, h’ = a* for some integer k. Using the division algorithm, we can find numbers q and r 
such that k =mq+r where 0 <r <™m; hence, 


ak =a™"'" = (a™)1a" = hia’. 


Soa’ =a*h~4. Since a* and h-4 are in H , a” must also be in H. However, m was the smallest positive number such that 
a™ was in H; consequently, r =0 andso k = mq. Therefore, 


h! =a" =a™ =h! 


and 4 is generated by h. 


# Corollary 4.11 


The subgroups of Z are exactly nZ forn =0,1,2,.... 


& Proposition 4.12 


Let G be a cyclic group of order n and suppose that a is a generator for G. Then a* = e if and only if n divides k. 


Proof 


First suppose that a* = e. By the division algorithm, k =ngq++r where 0 <r <n; hence, 


e= a® a4 qratr 


= CG! =e! =a". 
Since the smallest positive integer m such that a” =e isn, r=0. 


Conversely, if n divides k, then k = ns for some integer s. Consequently, 


a’ =a = (a”)’ =e =e. 


& Theorem 4.13 


Let G be a cyclic group of order n and suppose that a € G is a generator of the group. If b = a*, then the order of b is n/d, 
where d = gcd(k, n). 


Proof 


We wish to find the smallest integer m such that e = 6” = a*™. By Proposition 4.12, this is the smallest integer m such 
that n divides km or, equivalently, n/d divides m(k/d). Since d is the greatest common divisor of n and k, n/d and k/d 
are relatively prime. Hence, for n/d to divide m(k/d) it must divide m. The smallest such m is n/d. 


¥ Corollary 4.14 


The generators of Z,, are the integers r such that 1 <r <n and gcd(r,n) =1. 


Y Example 4.1.1 


Let us examine the group Z4¢. 


Solution 
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The numbers 1, 3, 5, 7, 9, 11,13, and 15 are the elements of Zj, that are relatively prime to 16. Each of these elements 
generates Zig. For example, 


E95 —i9 2-9 =2 3-9 =11 
4:9 =4 5:9 =138 6-9 =6 
7-9 =15 8-9 =8 9-9=1 


10-9 =10 11:9 =3 12-9 =12 
13-9 =5 14-9 =14 15-9 =7. 
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4.2: Multiplicative Group of Complex Numbers 
The complex numbers are defined as 
C={a+bi:a,beR}, 
where 22 = —1. If z=a+bi, then a is the real part of z and b is the imaginary part of z. 
To add two complex numbers z=a-+ bi and w =c-+di, we just add the corresponding real and imaginary parts: 
ztw =(at+bi)+(c+dt) =(a+c)+(b+d)i. 
Remembering that 72 = —1, we multiply complex numbers just like polynomials. The product of z and w is 
(a+bi)(c+di) = ac + bdi? + adi + bci = (ac — bd) + (ad +bc)i. 


Every nonzero complex number z=a+bi has a multiplicative inverse; that is, there exists a z+eC* such that 
ze =¢ 2=1, heath, then 


ae, a—bi 
a2 +b? 


The complex conjugate of a complex number z=a+bi is defined to be z=a—bi. The absolute value or modulus of 


z=a+tbi is|z| =Va?+0b?. 


vY Example 4.16 


Let z=2+4+37 andw=1-— 21. 


Solution 
Then 
zt+w =(24+3i)+ (1-21) =3+72 
and 
zw = (2+3%)(1—2i) = 8-1. 
Also, 
ven ee, 
1133, 313} 
|z| = /13 
Z=2-31 
+Y 
ez) =24+31 
z3 = —-3+ 26 
7 + 
*2=1-2i 


Figure 4.17. Rectangular coordinates of a complex number 
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There are several ways of graphically representing complex numbers. We can represent a complex number z=a-+bi as an 
ordered pair on the xy plane where a is the x (or real) coordinate and 6 is the y (or imaginary) coordinate. This is called the 
rectangular or Cartesian representation. The rectangular representations of z] =2+32, zg =1—22, and z3=-—3-+2% are 
depicted in Figure 4.17. 


YU 


at bi 


Figure 4.18. Polar coordinates of a complex number 


Nonzero complex numbers can also be represented using polar coordinates. To specify any nonzero point on the plane, it suffices 
to give an angle 6 from the positive x axis in the counterclockwise direction and a distance r from the origin, as in Figure 4.18. 
We can see that 


z=a+t+bi=r(cosé+isin8). 


Hence, 
r=|z)=Ve7 +h 
and 
a=rcosé 
b=rsiné. 


We sometimes abbreviate r(cos@+isin@) as r\cis@. To assure that the representation of z is well-defined, we also require that 
0° <6@< 360°. Ifthe measurement is in radians, then 0 < 0 < 27. 


vY Example 4.19 


Suppose that z = 2\cis60°. Then 
a=2cos60° =1 
and 
b=2sin60° = V3. 
Solution 
Hence, the rectangular representation is z= 1+ /3i. 


Conversely, if we are given a rectangular representation of a complex number, it is often useful to know the number's polar 
representation. If z = 3>/2 — 3/21, then 


r=vVa' +b? =/36=6 


and 
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d= arctan( ) = arctan(—1) = 315°, 
s0 34/2 — 34/21 = 6\cis315°. 


The polar representation of a complex number makes it easy to find products and powers of complex numbers. The proof of the 
following proposition is straightforward and is left as an exercise. 


& Proposition 4.20 


Let z=r\cis@ and w = s\cis@ be two nonzero complex numbers. Then 


\L zw = rs \cis( \theta + \phi)\text{.} \end{equation* 


wv Example 4.21 


If z=3\cis(7/3) and w = 2\cis(7/6), 
Solution 


then zw = 6\cis(m/2) = 61. 


& Theorem 4.22. DeMoivre 


Let z=1r\cis6 be a nonzero complex number. Then 
[r\cis6]” =r" \cis(n8) 
OP R= By cace 


Proof 
We will use induction on n. For n=1 the theorem is trivial. Assume that the theorem is true for all k such that 
1<k<n. Then 
gt = zz 
=r" (cosn@ +i sinn@)r(cos 6 +7 sin @) 
=r" |(cosn6cos@— sinnOsin@) +i(sinn@cos6 + cosnésin6)| 
=r"*1[cos(n0+6) +isin(nd+6)| 
=r" [cos(n+1)6 +isin(n +1)6]. 


Y Example 4.23 


Suppose that z =1+4 and we wish to compute z!°. 
Solution 


Rather than computing (1+ (Nie directly, it is much easier to switch to polar coordinates and calculate z!° using DeMoivre's 
Theorem: 


zi = (1 +i)10 
Tv 10 
= (va\cis(7)) 
= (V2) \cis =) 


= 32\cis (3) 
= 327. 
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The Circle Group and the Roots of Unity 


The multiplicative group of the complex numbers, C*, possesses some interesting subgroups. Whereas Q* and R* have no 
interesting subgroups of finite order, C* has many. We first consider the circle group, 


T={zeC: |z| =1}. 


The following proposition is a direct result of Proposition 4.20. 


& Proposition 4.24 


The circle group is a subgroup of C*. 


Although the circle group has infinite order, it has many interesting finite subgroups. Suppose that H = {1, —1,2, —i}. Then H is 
a subgroup of the circle group. Also, 1, —1, 7, and —d are exactly those complex numbers that satisfy the equation z* =1. The 
complex numbers satisfying the equation z” = 1 are called the nth roots of unity. 


& Theorem 4.25 


If z” =1, then the nth roots of unity are 
2k 
B= \ou (=) : 
n 
where k =0,1,...,n—1. Furthermore, the nth roots of unity form a cyclic subgroup of T of order n 


Proof 


By DeMoivre's Theorem, 
2k 
Zia NCIS (n=) = \cis(2k7) =1. 
n 


The z's are distinct since the numbers 2k7/n are all distinct and are greater than or equal to 0 but less than 27. The fact 
that these are all of the roots of the equation z” =1 follows from from Corollary 17.9, which states that a polynomial of 
degree n can have at most n roots. We will leave the proof that the nth roots of unity form a cyclic subgroup of T as an 
exercise. 


A generator for the group of the nth roots of unity is called a primitive nth root of unity. 


vY Example 4.26 


The 8th roots of unity can be represented as eight equally spaced points on the unit circle (Figure 4.27). 


Solution 


The primitive 8th roots of unity are 


v2 v2, 
= — +; —2 
ee 
2 2 
pa v2, v2, 
2 2 
een 
f= 
2 2 
or ee IE 
2 Der 
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Figure 4.27. 8th roots of unity 
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4.3: The Method of Repeated Squares 


Computing large powers can be very time-consuming. Just as anyone can compute 2? or 2°, everyone knows how to compute 


1,000,000 
2? : 


However, such numbers are so large that we do not want to attempt the calculations; moreover, past a certain point the 
computations would not be feasible even if we had every computer in the world at our disposal. Even writing down the decimal 
representation of a very large number may not be reasonable. It could be thousands or even millions of digits long. However, if we 
could compute something like 


937,398,332 (mod 46,389), 


we could very easily write the result down since it would be a number between 0 and 46,388. If we want to compute powers 
modulo n quickly and efficiently, we will have to be clever. ! 


The results in this section are needed only in Chapter 7 
The first thing to notice is that any number a can be written as the sum of distinct powers of 2; that is, we can write 
a= 2h 49h 4...4 2h, 


where ky < ky <---<k,y. This is just the binary representation of a. For example, the binary representation of 57 is 111001, 
since we can write 57 = 2° +23 +24 42°. 


The laws of exponents still work in Z,; that is, if b=a” (mod n) and c=a¥ (mod n), then bc=a**¥ (mod n). We can 
compute a> (mod n) in k multiplications by computing 


a” (mod n) 
a” (mod n) 
a” (mod n). 


Each step involves squaring the answer obtained in the previous step, dividing by n, and taking the remainder. 


vY Example 4.28 


We will compute 271°" (mod 481). Notice that 
321 =2° + 2° +25: 
hence, computing 271°? (mod 481) is the same as computing 
de oleae ole (med 481), 
So it will suffice to compute 271? (mod 481) where i =0, 6, 8. It is very easy to see that 
271” = 73,441 =329 (mod 481). 
We can square this result to obtain a value for 271? (mod 481): 


271” =(271")? (mod 481) 
= (329)? (mod 481) 
= 108,241 (mod 481) 
=16 (mod 481). 


We are using the fact that (a2")? = a?" = q@2""" (mod n). Continuing, we can calculate 


271" =419 (mod 481) 
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and 
2717 =16 (mod 481). 


Therefore, 
Dia ge = (Gairen| CE 
=O7l 271 2717 “(mod 481) 
=271-419-16 (mod 481) 
=1,816,784 (mod 481) 
=47 (mod 481). 


The method of repeated squares will prove to be a very useful tool when we explore Chapter 7. To encode and decode 
messages in a reasonable manner under this scheme, it is necessary to be able to quickly compute large powers of integers mod 


nN. 
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4.4: Reading Questions 
What is the order of the element 3 in U(20)? 


What is the order of the element 5 in U(23)? 
Find three generators of Zg. 
Find three generators of the 5" roots of unity. 


Show how to compute 15*° (mod 23) efficiently by hand. Check your answer with Sage. 


fm 
fa 
f 
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4.5: Exercises 


Prove or disprove each of the following statements. 


1. All of the generators of Zg¢o are prime. 

2. U(8) is cyclic. 

3. Q is cyclic. 

4. If every proper subgroup of a group G is cyclic, then G is a cyclic group. 
5. A group with a finite number of subgroups is finite. 


Find the order of each of the following elements. 


1.5 € Zy2 
2.J/3ER 

3. ./3 € R* 
4.ieC 

5. 72 € Zoa0 
6. 312 € Za71 


List all of the elements in each of the following subgroups. 


1. The subgroup of Z generated by 7 

2. The subgroup of Z24 generated by 15 

3. All subgroups of Z12 

4. All subgroups of Zo 

5. All subgroups of Z3 

6. All subgroups of Z4g 

7. The subgroup generated by 3 in U(20) 

8. The subgroup generated by 5 in U(18) 

9. The subgroup of R* generated by 7 
10. The subgroup of C* generated by i where i? = —1 
11. The subgroup of C* generated by 27 
12. The subgroup of C* generated by (1 +2)/./2 
13. The subgroup of C* generated by (1 + /32)/2 
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Find the order of every element in Z13. 
Find the order of every element in the symmetry group of the square, D4. 
What are all of the cyclic subgroups of the quaternion group, Q3? 
List all of the cyclic subgroups of U(30). 


List every generator of each subgroup of order 8 in Z32. 


fz 
c 
= 
fa 


Find all elements of finite order in each of the following groups. Here the “*” indicates the set with zero removed. 


1Z 


2.Q¢ 
3. R* 


If a?4 = e ina group G, what are the possible orders of a? 


Find a cyclic group with exactly one generator. Can you find cyclic groups with exactly two generators? Four generators? How 
about n generators? 


For n < 20, which groups U(n) are cyclic? Make a conjecture as to what is true in general. Can you prove your conjecture? 


iB eH iB 


Let 


tal | y and Bel, : 
—1 0 1 —-1 


be elements in G(R). Show that A and B have finite orders but AB does not. 


GNU Free Documentation License https ://math.libretexts.org/@go/page/81054 


Oibretexts: 


Evaluate each of the following. 
1. (3 — 27) + (57 —6) 
2. (4—5i) — (47-4) 
3. (5 —47)(7 + 27) 
4. (9 —1)(9 —1) 
Eee 
6. (1+4)+(1+¢) 


Convert the following complex numbers to the form a + bi. 


1. 2 cis(7/6) 
2. 5 cis(97/4) 
3. 3 cis(z) 

4. cis(7m/4) /2 


Change the following complex numbers to polar representation. 
1.1-i 
255) 
3.242% 
4.J/3+i 
5. —34 
6. 22 +2/3 


Calculate each of the following expressions. 


Prove each of the following statements. 


1. |2| = |2| 

2. 2 =|z/" 

3.27 =2/|z/ 

4. |z+w| <|z|+|w| 
5. |z—w| > ||2| —|w| 
6. |zw| = |2z||w| 
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List and graph the 6th roots of unity. What are the generators of this group? What are the primitive 6th roots of unity? 


List and graph the 5th roots of unity. What are the generators of this group? What are the primitive 5th roots of unity? 


Calculate each of the following. 


1.29277" (mod 582) 
2.25574! (mod 5681) 
3. 207192 (mod 4724) 
4.971°*' (mod 765) 


Let a, b € G. Prove the following statements. 


1. The order of a is the same as the order of a!. 
2. For all g € G, |a| = |g tag. 
3. The order of ab is the same as the order of ba. 


Let p and q be distinct primes. How many generators does Zp, have? 


Let p be prime and r be a positive integer. How many generators does Zp, have? 


Prove that Z, has no nontrivial subgroups if p is prime. 


If g and h have orders 15 and 16 respectively in a group G, what is the order of (g) NM (h)? 


Let a be an element in a group G. What is a generator for the subgroup (a) M (a”)? 


Prove that Z,, has an even number of generators for n > 2. 


A 


Suppose that G is a group and let a, b € G. Prove that if |a] =m and |b| =n with gcd(m, n) = 1, then (a) M (b) = {e}. 
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Let G be an abelian group. Show that the elements of finite order in G form a subgroup. This subgroup is called the torsion 
subgroup of G. 


Let G be a finite cyclic group of order n generated by x. Show that if y=" where gcd(k,n)=1, then y must be a 
generator of G. 


If G is an abelian group that contains a pair of cyclic subgroups of order 2, show that G must contain a subgroup of order 4. 
Does this subgroup have to be cyclic? 


Let G be an abelian group of order pq where gcd(p, q) = 1. If G contains elements a and b of order p and q respectively, then 
show that G is cyclic. 


Prove that the subgroups of Z are exactly nZ forn =0,1,2,.... 

Prove that the generators of Z,, are the integers r such that 1 <r <n and gcd(r,n) = 1. 
Prove that if G has no proper nontrivial subgroups, then G is a cyclic group. 

Prove that the order of an element in a cyclic group G must divide the order of the group. 

Prove that if G is a cyclic group of order m and d | m, then G must have a subgroup of order d. 
For what integers n is —1 an nth root of unity? 


If z=r(cos@+isin@) and w= s(cos¢+isin@) are two nonzero complex numbers, show that 


zw = rs{cos(0+ ¢) +isin(@+¢)]. 


E 
g 
E 
S 
= 
= 
= 
S 
Ee 
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Prove that the circle group is a subgroup of C*. 

Prove that the nth roots of unity form a cyclic subgroup of T of order n. 

Let a € T. Prove that v” =1 anda” =1 if and only if a4 = 1 ford =ged(m, n). 
Let z € C*. If|z| 41, prove that the order of z is infinite. 


Let z=cos@+isin@ bein T where 0 € Q. Prove that the order of z is infinite. 


‘BB BB 
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4.6: Programming Exercises 


Write a computer program that will write any decimal number as the sum of distinct powers of 2. What is the largest integer 
that your program will handle? 


Write a computer program to calculate a? (mod n) by the method of repeated squares. What are the largest values of n and x 
that your program will accept? 


This page titled 4.6: Programming Exercises is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or 
curated by Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the 
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4.8: Sage 


Cyclic groups are very important, so it is no surprise that they appear in many different forms in Sage. Each is slightly different, 
and no one implementation is ideal for an introduction, but together they can illustrate most of the important ideas. Here is a guide 
to the various ways to construct, and study, a cyclic group in Sage. 


Infinite Cyclic Groups 


In Sage, the integers Z are constructed with ZZ . To build the infinite cyclic group such as 3Z from Example 4.1, simply use 
3*ZZ . As an infinite set, there is not a whole lot you can do with this. You can test if integers are in this set, or not. You can also 
recall the generator with the .gen() command. 


Additive Cyclic Groups 


The additive cyclic group Z,, can be built as a special case of a more general Sage construction. First we build Z14 and capture its 
generator. Throughout, pay close attention to the use of parentheses and square brackets for when you experiment on your own. 


You can compute in this group, by using the generator, or by using new elements formed by coercing integers into the group, or by 
taking the result of operations on other elements. And we can compute the order of elements in this group. Notice that we can 
perform repeated additions with the shortcut of taking integer multiples of an element. 


We can create, and then compute with, new elements of the group by coercing an integer (in a list of length 1) into the group. You 
may geta DeprecationWarning the first time you use this syntax if you are using an old version of Sage. The mysterious 
warning can be safely ignored. 


It is possible to create cyclic subgroups, from an element designated to be the new generator. Unfortunately, to do this requires the 
.Submodule() method (which should be renamed in Sage). 


The cyclic subgroup H just created has more than one generator. We can test this by building a new subgroup and comparing the 
two subgroups. 


Certainly the list of elements, and the common generator of (2) lead us to belive that H and K_ are the same, but the 
comparison in the last line leaves no doubt. 


Results in this section, especially Theorem 4.13 and Corollary 4.14, can be investigated by creating generators of subgroups from a 
generator of one additive cyclic group, creating the subgroups, and computing the orders of both elements and orders of groups. 
Abstract Multiplicative Cyclic Groups 


We can create an abstract cyclic group in the style of Theorem 4.3, Theorem 4.9, and Theorem 4.10. In the syntax below a isa 
name for the generator, and 14 is the order of the element. Notice that the notation is now multiplicative, so we multiply 
elements, and repeated products can be written as powers. 


Computations in the group are similar to before, only with different notation. Now products, with repeated products written as 
exponentiation. 


Subgroups can be formed witha .Ssubgroup() command. But do not try to list the contents of a subgroup, it'll look strangely 
unfamiliar. Also, comparison of subgroups is not implemented. 


One advantage of this implementation is the possibility to create all possible subgroups. Here we create the list of subgroups, 
extract one in particular (the third), and check its order. 
Cyclic Permutation Groups 


We will learn more about permutation groups in the next chapter. But we will mention here that it is easy to create cyclic groups as 
permutation groups, and a variety of methods are available for working with them, even if the actual elements get a bit 
cumbersome to work with. As before, notice that the notation and syntax is multiplicative. 


We can create subgroups, check their orders, and list their elements. 


It could help to visualize this group, and the subgroup, as rotations of a regular 12-gon with the vertices labeled with the integers 1 
through 12. This is not the full group of symmetries, since it does not include reflections, just the 12 rotations. 
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Cayley Tables 


As groups, each of the examples above (groups and subgroups) have Cayley tables implemented. Since the groups are cyclic, and 
their subgroups are therefore cyclic, the Cayley tables should have a similar “cyclic” pattern. Note that the letters used in the 
default table are generic, and are not related to the letters used above for specific elements — they just match up with the group 
elements in the order givenby .list() . 


If the real names of the elements are not too complicated, the table could be more informative using these names. 


Complex Roots of Unity 


The finite cyclic subgroups of T, generated by a primitive nth root of unity are implemented as a more general construction in 
Sage, known as a cyclotomic field. If you concentrate on just the multiplication of powers of a generator (and ignore the infinitely 
many other elements) then this is a finite cyclic group. Since this is not implemented directly in Sage as a group, per se, it is a bit 
harder to construct things like subgroups, but it is an excellent exercise to try. It is a nice example since the complex numbers are a 
concrete and familiar construction. Here are a few sample calculations to provide you with some exploratory tools. See the notes 
following the computations. 


Notes: 


1. zetai4 is the name of the generator used for the cyclotomic field, it is a primitive root of unity (a 14th root of unity in this 
case). We have captured it as Ww . 

2. The syntax CDF (Ww) will convert the complex number w into the more familiar form with real and imaginary parts. 

3. The method .abs() will return the modulus of a complex number, r as described in the text. For elements of C* this should 
always equal 1. 

4.The method .arg() will return the argument of a complex number, @ as described in the text. Every element of the cyclic 
group in this example should have an argument that is an integer multiple of an The N() syntax converts the symbolic value 
of pi toanumerical approximation. 

5. sg isa list of elements that form a cyclic subgroup of order 7, composed of the first 7 powers of b = w/2 . So, for 
example, the last comparison multiplies the fifth power of ) with the sixth power of b , which would be the eleventh power 
of b .Butsince b_ has order 7, this reduces to the fourth power. 

6. If you know a subset of an infinite group forms a subgroup, then you can produce its Cayley table by specifying the list of 
elements you want to use. Here we ask for a multiplication table, since that is the relevant operation. 
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4.9: Sage Exercises 


This group of exercises is about the group of units mod n, U(n), which is sometimes cyclic, sometimes not. There are some 
commands in Sage that will answer some of these questions very quickly, but instead of using those now, just use the basic 
techniques described. The idea here is to just work with elements, and lists of elements, to discern the subgroup structure of these 
groups. 


Sage worksheets have extensive capabilities for making new cells with carefully formatted text, include support for LaTeX syntax 
to express mathematics. So when a question asks for explanation or commentary, make a new cell and communicate clearly with 
your audience. Continue this practice in subsequent exercise sets. 


Execute the statement R = Integers(4Q@) tocreatetheset [0,1,2,...,39] This is a group under addition mod 
40, which we will ignore. Instead we are interested in the subset of elements which have an inverse under multiplication mod 
40. Determine how big this subgroup is by executing the command R.unit group _order() , and then obtain a list of 
these elements with R.list_of_elements_of_multiplicative_group() . 


You can create elements of this group by coercing regular integers into U , such as with the statement a = U(7) . (Don't 
confuse this with our mathematical notation U(40).) This will tell Sage that you want to view 7 as an element of U, subject to 
the corresponding operations. Determine the elements of the cyclic subgroup of U generated by 7 with a list comprehension as 
follows: 


What is the order of 7 in U(40)? 


The group U(49) is cyclic. Using only the Sage commands described previously, use Sage to find a generator for this group. 
Now using only theorems about the structure of cyclic groups, describe each of the subgroups of U(49) by specifying its order 
and by giving an explicit generator. Do not repeat any of the subgroups — in other words, present each subgroup exactly once. 
You can use Sage to check your work on the subgroups, but your answer about the subgroups should rely only on theorems and 
be a nicely written paragraph with a table, etc. 


The group U(35) is not cyclic. Again, using only the Sage commands described previously, use computations to provide 
irrefutable evidence of this. How many of the 16 different subgroups of U(35) can you list? 


Again, using only the Sage commands described previously, explore the structure of U(n) for various values of n and see if 
you can formulate an interesting conjecture about some basic property of this group. (Yes, this is a very open-ended question, 
but this is ultimately the real power of exploring mathematics with Sage.) 
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CHAPTER OVERVIEW 


5: Permutation Groups 


Permutation groups are central to the study of geometric symmetries and to Galois theory, the study of finding solutions of 
polynomial equations. They also provide abundant examples of nonabelian groups. 


Let us recall for a moment the symmetries of the equilateral triangle A ABC from Chapter 3. The symmetries actually consist of 
permutations of the three vertices, where a permutation of the set S = {A, B,C} is a one-to-one and onto map 7: S > S. The 


three vertices have the following six permutations. 
ABC ( ABC ( ABC 
ABC C A B BCA 
ABC ABC A B 
A C B C BA BA 
ABC 
BCA 


to denote the permutation that sends A to B, B to C, and C to A. That is, 


AnvbB 
Bud 
CHA. 


We have used the array 


The symmetries of a triangle form a group. In this chapter we will study groups of this type. 


5.1: Definitions and Notation 
5.2: Dihedral Groups 

5.3: Reading Questions 

5.4: Exercises 

5.5: Sage 

5.6: Sage Exercises 
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5.1: Definitions and Notation 


In general, the permutations of a set X form a group S'x. If X is a finite set, we can assume X = {1, 2,...,n}. In this case we 
write S, instead of Sx. The following theorem says that S,, is a group. We call this group the symmetric group on n letters. 


& Theorem 5.1 


The symmetric group on n letters, S,,, is a group with n! elements, where the binary operation is the composition of maps. 


Proof 


The identity of S;, is just the identity map that sends 1 to 1, 2 to2,..., n ton. If f : 8, 4S, is a permutation, then f—! 
exists, since f is one-to-one and onto; hence, every permutation has an inverse. Composition of maps is associative, which 
makes the group operation associative. We leave the proof that |S,,| =n! as an exercise. 


A subgroup of S,, is called a permutation group. 


Consider the subgroup G of $5 consisting of the identity permutation \identity and the permutations 


2. 3) es 
(Co— 
G 3 :) 


2 5 
1 25 Bas 
i — 
502 fas 
tae 
tS Newall aneray), 


Solution 


The following table tells us how to multiply elements in the permutation group G. 


) \identity o T Le 
\identity | \identity o F m 

o o \identity m T 

T Te m \identity o 

be be T o \identity 


Though it is natural to multiply elements in a group from left to right, functions are composed from right to left. Let o and T be 
permutations on a set X. To compose o and 7 as functions, we calculate (9 0 r)(x) = o(7(z)). That is, we do 7 first, then o. 
There are several ways to approach this inconsistency. We will adopt the convention of multiplying permutations right to left. 
To compute oT, do 7 first and then a. That is, by or(z) we mean o(7(z)). (Another way of solving this problem would be to 
write functions on the right; that is, instead of writing o(a), we could write (a)o. We could also multiply permutations left to 
right to agree with the usual way of multiplying elements in a group. Certainly all of these methods have been used. 


vY Example 5.4 


Permutation multiplication is not usually commutative. Let 


2 
1 
2 
1 


BPwhd wo 
wn 
Soe 
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Solution 


Then 


but 


Cycle Notation 


The notation that we have used to represent permutations up to this point is cumbersome, to say the least. To work effectively with 
permutation groups, we need a more streamlined method of writing down and manipulating permutations. 


A permutation o € Sx is a cycle of length k if there exist elements a1, a@2,...,a% € X such that 
oO (a1) =a2 
Oo (a2) = a3 
o(ax) =a, 
and o(x) =a for all other elements z € X. We will write (a1, a2, ..., @,) to denote the cycle o. Cycles are the building blocks of 


all permutations. 


The permutation 


7 
: = (162354) 


is a cycle of length 6, whereas 


is a cycle of length 3. 
Solution 
Not every permutation is a cycle. Consider the permutation 


Goo ae 


7 ee 5) =(1248)(66) 


This permutation actually contains a cycle of length 2 and a cycle of length 4. 


vY Example 5.6 


It is very easy to compute products of cycles. Suppose that 

o0 =(1352) and 7=(256). 
Solution 
If we think of o as 


13, 3H 5, 5H 2, 21, 


and 7 as 
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245, 5H 6, 6H 2, 
then for o7 remembering that we apply 7 first and then a, it must be the case that 
13, 3H 5, 5H 6, 6H 2H 1, 
or or = (1356). If w = (1634), then ou = (1652)(34). 


Two cycles in Sx, 0 = (a1, a2,...,a,%) and T = (bj, bo,..., by), are disjoint if a; # b; for all a and j. 


The cycles (135) and (27) are disjoint; however, the cycles (135) and (347) are not. 
Solution 
Calculating their products, we find that 


(135)(2 
(135) (34 


7) = (135)(27) 

7) = (13475). 

The product of two cycles that are not disjoint may reduce to something less complicated; the product of disjoint cycles cannot 
be simplified. 


& Proposition 5.8 


Let o and T be two disjoint cycles in Sx. Thenot =To. 


Proof 
Let o = (a1, a@2,...,@,) and 7 = (bi, b2,..., 6;). We must show that o7(x) =7o(x) for all x € X. If @ is neither in 
{a1,a2,...,a%}nor {b1, bg,..., bj },then both o and 7 fix x. That is, o(z) =x andt(z) =a. Hence, 


ot(x) =o(1(x)) =o(x) =2 =7(z) =7(0(x)) =To(z). 


Do not forget that we are multiplying permutations right to left, which is the opposite of the order in which we usually 
multiply group elements. Now suppose that z € {a1, @2,...,@%}. Then o(a;) = a@(imodk) 41; that is, 


ait ag 
az +> a3 


api > az 
ant? ay. 


However, T(a,;) =a, since o and 7 are disjoint. Therefore, 


T(a;)) 


ai) 


oT(a;) =o( 
o( 
(imodk)+1 


o(a:)) 


a 

= T(a, imod k) +41) 
T( 

Ta(aj). 


Similarly, if x € {b1, b2,...,6;}, then o and 7 also commute. 


& Theorem 5.9 


Every permutation in S,, can be written as the product of disjoint cycles. 


Proof 
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We can assume that X = {1,2,...,n}.If 7 € Sp and we define X; to be {o(1),07(1),...}, then the set X; is finite 
since X is finite. Now let 7 be the first integer in X that is not in X, and define X» by {o(i), o (z),...}. Again, X2 isa 
finite set. Continuing in this manner, we can define finite disjoint sets X3,X4,.... Since X is a finite set, we are 
guaranteed that this process will end and there will be only a finite number of these sets, say r. If a; is the cycle defined by 


ele)=1 0 aoe 


then 0 = 0102---o,. Since the sets X,, X2,..., X;, are disjoint, the cycles 01, 02,...,0, must also be disjoint. 


vY Example 5.10 


Let 
123 4 5 6 
C= 
643 1 5 2 
12 3 4 5 6 
—— 
3 dl 4 
Solution 
Using cycle notation, we can write 
o = (1624) 
7 = (13)(456) 
oT = (136)(245) 
To = (143)(256) 


From this point forward we will find it convenient to use cycle notation to represent permutations. When using cycle notation, 
we often denote the identity permutation by (1). 


Transpositions 
The simplest permutation is a cycle of length 2. Such cycles are called transpositions. Since 
(1, @2,.--,@n) = (414n)(414n-1) - + - (a1€3)(a1a2), 


any cycle can be written as the product of transpositions, leading to the following proposition. 


& Proposition 5.12 


Any permutation of a finite set containing at least two elements can be written as the product of transpositions 


Consider the permutation 
(16)(253) = (16)(23)(25) = (16)(45)(23)(45)(25). 
Solution 


As we can see, there is no unique way to represent permutation as the product of transpositions. For instance, we can write the 
identity permutation as (12)(12), as (13)(24)(13)(24), and in many other ways. However, as it turns out, no permutation can 
be written as the product of both an even number of transpositions and an odd number of transpositions. For instance, we could 
represent the permutation (16) by 


(23)(16)(23) 
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or by 
(35)(16)(13)(16)(13)(35)(56), 


but (16) will always be the product of an odd number of transpositions. 


& Lemma 5.14 


If the identity is written as the product of r transpositions, 
\identity = 772---Tr, 


then r is an even number. 


Proof 


We will employ induction on r. A transposition cannot be the identity; hence, r >1. If r =2, then we are done. Suppose 
that r > 2. In this case the product of the last two transpositions, T,_17,, must be one of the following cases: 


(ab)(ab) = \identity 


where a, b, c, and d are distinct. 


The first equation simply says that a transposition is its own inverse. If this case occurs, delete 7,17, from the product to 
obtain 


\identity = 7172 - ++ Tp_3Tr_2- 
By induction r —2 is even; hence, r must be even. 


In each of the other three cases, we can replace 7,_17, with the right-hand side of the corresponding equation to obtain a 
new product of r transpositions for the identity. In this new product the last occurrence of a will be in the next-to-the-last 
transposition. We can continue this process with 7,_27,_1 to obtain either a product of r—2 transpositions or a new 
product of r transpositions where the last occurrence of a is in 7,_2. If the identity is the product of r—2 transpositions, 
then again we are done, by our induction hypothesis; otherwise, we will repeat the procedure with 7,_37,_2. 


At some point either we will have two adjacent, identical transpositions canceling each other out or a will be shuffled so 
that it will appear only in the first transposition. However, the latter case cannot occur, because the identity would not fix a 
in this instance. Therefore, the identity permutation must be the product of r—2 transpositions and, again by our induction 
hypothesis, we are done. 


& Theorem 5.15 


If a permutation o can be expressed as the product of an even number of transpositions, then any other product of 
transpositions equaling o must also contain an even number of transpositions. Similarly, if a can be expressed as the product 
of an odd number of transpositions, then any other product of transpositions equaling o must also contain an odd number of 
transpositions. 


Proof 
Suppose that 
0 =0102°++*Om =T1T2°** Tn, 


where m is even. We must show that n is also an even number. The inverse of o is 0m --: 01. Since 


\identity = 00m-+++01 =T1°-+*TnOm*+° 1, 
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nm must be even by Lemma 5.14. The proof for the case in which o can be expressed as an odd number of transpositions is 
left as an exercise. 


In light of Theorem 5.15, we define a permutation to be even if it can be expressed as an even number of transpositions and odd if 
it can be expressed as an odd number of transpositions. 
The Alternating Groups 


One of the most important subgroups of S,, is the set of all even permutations, A,. The group A, is called the alternating group 
on n letters. 


& Theorem 5.16 


The set A, is a subgroup of Sp. 


Proof 


Since the product of two even permutations must also be an even permutation, A, is closed. The identity is an even 
permutation and therefore is in A,,. If o is an even permutation, then 


0 —0102°°°'O,, 
where o; is a transposition and r is even. Since the inverse of any transposition is itself, 
-1 
OG =O,7O7_1 °°" O01 


is also in Ap. 


& Proposition 5.17 


The number of even permutations in S,,, 2 > 2, is equal to the number of odd permutations; hence, the order of A, is n!/2. 


Proof 


Let A, be the set of even permutations in S$, and B, be the set of odd permutations. If we can show that there is a 
bijection between these sets, they must contain the same number of elements. Fix a transposition o in S,. Since n > 2, 
such ao exists. Define 


Na & ‘An => Bn 
by 
Ao (T) =oT. 
Suppose that A,(7) =A,(u). Thenor =op and so 
-1 -1 
T=0 OT=0 Of=w. 


Therefore, A, is one-to-one. We will leave the proof that A, is surjective to the reader. 


vY Example 5.18 


The group A, is the subgroup of $4 consisting of even permutations. There are twelve elements in Ay: 


(1) (12)(34) — (13)(24) (14) (23) 
(23)) 9 (isa) (124) (142) 
(134) (143) (234) (243). 


Solution 
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One of the end-of-chapter exercises will be to write down all the subgroups of A,4. You will find that there is no subgroup of 
order 6. Does this surprise you? 


Historical Note 


Lagrange first thought of permutations as functions from a set to itself, but it was Cauchy who developed the basic theorems and 
notation for permutations. He was the first to use cycle notation. Augustin-Louis Cauchy (1789-1857) was born in Paris at the 
height of the French Revolution. His family soon left Paris for the village of Arcueil to escape the Reign of Terror. One of the 
family's neighbors there was Pierre-Simon Laplace (1749-1827), who encouraged him to seek a career in mathematics. Cauchy 
began his career as a mathematician by solving a problem in geometry given to him by Lagrange. Cauchy wrote over 800 papers on 
such diverse topics as differential equations, finite groups, applied mathematics, and complex analysis. He was one of the 
mathematicians responsible for making calculus rigorous. Perhaps more theorems and concepts in mathematics have the name 
Cauchy attached to them than that of any other mathematician. 
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5.2: Dihedral Groups 


Another special type of permutation group is the dihedral group. Recall the symmetry group of an equilateral triangle in Chapter 3. 
Such groups consist of the rigid motions of a regular n-sided polygon or n-gon. For n = 3,4,..., we define the nth dihedral 
group to be the group of rigid motions of a regular n-gon. We will denote this group by D,,. We can number the vertices of a 
regular n-gon by 1, 2,...,n(Figure 5.19). Notice that there are exactly n choices to replace the first vertex. If we replace the first 
vertex by k, then the second vertex must be replaced either by vertex k+1 or by vertex k—1; hence, there are 2n possible rigid 
motions of the n-gon. We summarize these results in the following theorem. 


Figure 5.19. A regular n-gon 


& Theorem 5.20 


The dihedral group, Dy, is a subgroup of S;, of order \(2n\text{.}\ 


& Theorem 5.21 


The group D,,, n > 3, consists of all products of the two elements r and s, satisfying the relations 


all 
s=1 
=il 
srs=r.. 


Proof 
The possible motions of a regular n-gon are either reflections or rotations (Figure 5.22). There are exactly n possible 
rotations: 


360 2. 360 Feed ee 
n n n 


\identity, 


We will denote the rotation 360° /n by r. The rotation r generates all of the other rotations. That is, 


ee 360 


n 
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rotation 
reflection 
4 4 
5 5 
Figure 5.22.Rotations and reflections of a regular n-gon 

Label the n reflections 51, 52,...,5n,, Where sz is the reflection that leaves vertex k fixed. There are two cases of 
reflections, depending on whether n is even or odd. If there are an even number of vertices, then two vertices are left fixed 
by a reflection, and $1 = $p/241, $2 = $n/242,;--+)$n/2 = $n- If there are an odd number of vertices, then only a single 
vertex is left fixed by a reflection and s;,s2,...,S, are distinct (Figure 5.23). In either case, the order of each sz is two. 


Let s = s,. Then s? =1 andr” =1. Since any rigid motion t of the n-gon replaces the first vertex by the vertex k, the 
second vertex must be replaced by either k+1 or by k—1. If the second vertex is replaced by k+1, then t =r*. If the 
second vertex is replaced by k—1, thent = rks, 2 Hence, r and s generate D,,. That is, D, consists of all finite products 
of r and s, 


2 =i 2 =il 
1D), SL PF pooogt py Gp PRT Grooogt he 


t 


We will leave the proof that srs =r ~_ as an exercise. 


Since we are in an abstract group, we will adopt the convention that group elements are multiplied left to right. 


1 1 
6 2 2 6 
5 3 3 5 

4 t 

1 1 

2 
Cy Cy 
4 3 3 4 


Figure 5.23.Types of reflections of a regular n-gon 
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5.3: Reading Questions 


Express (13 4)(3 5 4) as a cycle, or a product of disjoint cycles. (Interpret the composition of functions in the order used by 
Sage, which is the reverse of the order used in the book.) 


What is a transposition? 
What does it mean for a permutation to be even or odd? 
Describe another group that is fundamentally the same as A3. 


Write the elements of the symmetry group of a pentagon using permutations in cycle notation. Do this exercise by hand, and 
without the assistance of Sage. 


“ib 3B 7B 7B 
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5.4: Exercises 


Write the following permutations in cycle notation. 


1. 2 354 5 
24 1 5 3 

2: 123 4 5 
425 1 3 

3 123 4 5 
3.5 1 4 2 

4. 123 4 °) 
143 2 5 


Compute each of the following. 
1. (1345) (234) 

12)(1253) 

. (143) (2 ee 


[(12)(34)(12)(47)] 7 
16. [(1235)(467)] + 


Express the following permutations as products of transpositions and identify them as even or odd. 


1. (14356) 

156)(234) 

1426)(142) 

17254) (1423)(154632) 


3. 
4. 
5. (142637) 


2. ( 
( 
( 
( 


Find (a1, @2,...,@n) 


—1 
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List all of the subgroups of S4. Find each of the following sets: 


1. {a € $4: 0(1) =3} 
2. {0 € $4: 0(2) =2} 
3. {0 € Sq: 0(1) =3 and o(2) =2}. 


Are any of these sets subgroups of S4? 


Find all of the subgroups in Ay. What is the order of each subgroup? 


Find all possible orders of elements in $7 and A7. 


Show that Ajo contains an element of order 15. 


Does Ag contain an element of order 26? 


7B BB 


Find an element of largest order in S,, forn = 3,...,10. 


What are the possible cycle structures of elements of As? What about Ag? 


Let o € S,, have order n. Show that for all integers i and j, 0’ = o/ if and only ifi =j (mod n). 


Let o =01---Om € S, be the product of disjoint cycles. Prove that the order of o is the least common multiple of the lengths 
of the cycles 01,...,0m. 


Using cycle notation, list the elements in D;. What are r and s? Write every element as a product of r and s. 


If the diagonals of a cube are labeled as Figure 5.28, to which motion of the cube does the permutation (12)(34) correspond? 
What about the other permutations of the diagonals? 


fa 
- 
me 
E 
c& 
E 
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Find the group of rigid motions of a tetrahedron. Show that this is the same group as Aq. 

Prove that S,, is nonabelian for n > 3. 

Show that A,, is nonabelian for n > 4. 

Prove that D,, is nonabelian for n > 3. 

Let o € S, bea cycle. Prove that o can be written as the product of at most n —1 transpositions. 

Let o € S,,. If o is not a cycle, prove that o can be written as the product of at most n — 2 transpositions. 


If o can be expressed as an odd number of transpositions, show that any other product of transpositions equaling 7 must also 


(ez 
oO 
lo} 
Q 
Qa 


If o is a cycle of odd length, prove that a? is also a cycle. 


Show that a 3-cycle is an even permutation. 


Prove that in A, with n > 3, any permutation is a product of cycles of length 3. 


THB GB GH BB 7B eB 


Prove that any element in S,, can be written as a finite product of the following permutations. 


1. (12), (13),... , (1m) 
2. (12), (23),...,(n—1,n) 
302) (122 en) 
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Let G be a group and define a map A, : G+ G by A,(a) = ga. Prove that A, is a permutation of G. 


| rove that there exist n! permutations of a set containing n elements. 


Recall that the center of a group G is 
Z(G) ={9¢€ G: gx = ag forall az € G}. 
Find the center of Dg. What about the center of D,g? What is the center of D,,? 


P 
Let 7 = (a1, @2,...,@%) be acycle of length k. 
1. Prove that if o is any permutation, then 
ota | =(o(a1), 0(a2),...,0(ax)) 
is a cycle of length k. 


2. Let ps be a cycle of length k. Prove that there is a permutation o such that oro~! = p. 


For a and £ in S;,, define a ~ f if there exists an o € S, such that cao! = B. Show that ~ is an equivalence relation on 
| ‘Sie 


Leto € Sx. Ifo"(x) =y for some n € Z, we will say that x ~ y. 


1. Show that ~ is an equivalence relation on X. 
2. Define the orbit of x € X under o € Sx to be the set 


Ore — Ayes 


Compute the orbits of each element in {1, 2, 3, 4, 5 }under each of the following elements in Ss: 


a = (1254) 
B = (123)(45) 
+ = (13)(28). 
3. If Oz,¢ Oyo #9, prove that O,,, = Oy,>. The orbits under a permutation o are the equivalence classes corresponding to 


the equivalence relation ~ . 
4. A subgroup H of S‘x is transitive if for every z, y € X, there exists ao € H such that o(x) = y. Prove that (c) is 
transitive if and only if O,,, =X forsome z € X. 


Leta € S, for n > 3. If a8 = Ba for all 8 € S,,, prove that a must be the identity permutation; hence, the center of S,, is 
the trivial subgroup. 


GNU Free Documentation License https ://math.libretexts.org/@go/page/81063 


Oibretexts: 


If a is even, prove that a! is also even. Does a corresponding result hold if a is odd? 
Ifo € A, andr € S,, show that r lor € Ap. 


Show that a~!8~1a is even for a, 8 € Sp. 


Let r and s be the elements in D,, described in Theorem 5.21 
1. Show that srs =r-!. 
2. Show that r*s = sr—* in Dy. 
3. Prove that the order of r* € D,, is n/ gcd(k, n). 
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5.5: Sage 


A good portion of Sage's support for group theory is based on routines from GAP (Groups, Algorithms, and Programming) at 
www.gap-system.org, which is included in every copy of Sage. This is a mature open source package, dating back to 1986. 
(Forward reference here to GAP console, etc.) 


As we have seen, groups can be described in many different ways, such as sets of matrices, sets of complex numbers, or sets of 
symbols subject to defining relations. A very concrete way to represent groups is via permutations (one-to-one and onto functions 
of the integers 1 through 7), using function composition as the operation in the group, as described in this chapter. Sage has many 
routines designed to work with groups of this type and they are also a good way for those learning group theory to gain experience 
with the basic ideas of group theory. For both these reasons, we will concentrate on these types of groups. 


Permutation Groups and Elements 


The easiest way to work with permutation group elements in Sage is to write them in cycle notation. Since these are products of 
disjoint cycles (which commute), we do not need to concern ourselves with the actual order of the cycles. If we write 

(1,3)(2,4) we probably understand it to be a permutation (the topic of this chapter!) and we know that it could be an element 
of 54, or perhaps a symmetric group on more symbols than just 4. Sage cannot get started that easily and needs a bit of context, so 
we coerce a string of characters written with cycle notation into a symmetric group to make group elements. Here are some 
examples and some sample computations. Remember that Sage and your text differ on how to interpret the order of composing two 
permutations in a product. 


If the next three examples seem confusing, or “backwards”, then now would be an excellent time to review the Sage discussion 
about the order of permutation composition in the subsection Groups of symmetries. 


There are alternate ways to create permutation group elements, which can be useful in some situations, but they are not quite as 
useful in everday use. 


The second version of a is a list of “tuples”, which requires a lot of commas and these must be enclosed in a list. (A tuple of length 
one must be written like (4, ) to distinguish it from using parentheses for grouping, asin 5%*(4) .) The third version uses the 
“bottom-row” of the more cumbersome two-row notation introduced at the beginning of the chapter — it is an ordered list of the 
output values of the permutation when considered as a function. 


So we then see that despite three different input procedures, all the versions of o print the same way, and moreso they are actually 
equal to each other. (This is a subtle difference — what an object is in Sage versus how an object displays itself.) 


We can be even more careful about the nature of our elements. Notice that once we get Sage started, it can promote the product to 
into the larger permutation group. We can “promote” elements into larger permutation groups, but it is an error to try to shoe-horn 
an element into a too-small symmetric group. 


It is an error to try to coerce a permutation with too many symbols into a permutation group employing too few symbols. 


Better than working with just elements of the symmetric group, we can create a variety of permutation groups in Sage. Here is a 
sampling for starters: 


Table 5.30. Some Sage permutation groups 


Sage Command Description 
SymmetricGroup(n) Permutations on n symbols, n! elements 
DihedralGroup(n) Symmetries of an n-gon, 2n elements. 
CyclicPermutationGroup(n) Rotations of an n-gon (no flips), n elements 
AlternatingGroup(n) Alternating group on n symbols, n!/2 elements 
KleinFourGroup( ) A non-cyclic group of order 4 


You can also locate Sage permutation groups with the groups catalog. In the next cell place your cursor right after the final dot 
and hit the tab-key. You will get a list of methods you can use to create permutation groups. As always, place a question-mark after 
a method and hit the tab-key to get online documentation of a method. 
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Properties of Permutation Elements 


Sometimes it is easier to grab an element out of a list of elements of a permutation group, and then it is already attached to a parent 
and there is no need for any coercion. In the following, rotate and flip are automatically elements of G because of the 
way we procured them. 


So we see from this final statement that the group of symmetries of a pentagon is not abelian. But there is an easier way. 


There are many more methods you can use for both permutation groups and their individual elements. Use the blank compute cell 
below to create a permutation group (any one you like) and an element of a permutation group (any one you like). Then use tab- 
completion to see all the methods available for an element, or for a group (name, period, tab-key). Some names you may recognize, 
some we will learn about in the coming chapters, some are highly-specialized research tools you can use when you write your 
Ph.D. thesis in group theory. For any of these methods, remember that you can type the name, followed by a question mark, to see 
documentation and examples. Experiment and explore — it is really hard to break anything. 


Here are some selected examples of various methods available. 


A very useful method when studying the alternating group is the permutation group element method .sign() . It will return 
1 ifapermutation isevenand -1 ifa permutation is odd. 


We can create subgroups by giving the main group a list of “generators.” These elements serve to “generate” a subgroup — 
imagine multiplying these elements (and their inverses) together over and over, creating new elements that must also be in the 
subgroup and also become involved in new products, until you see no new elements. Now that definition ends with a horribly 
imprecise statement, but it should suffice for now. A better definition is that the subgroup generated by the elements is the smallest 
subgroup of the main group that contains all the generators — which is fine if you know what all the subgroups might be. 


With a single generator, the repeated products just become powers of the lone generator. The subgroup generated then is cyclic. 
With two (or more) generators, especially in a non-abelian group, the situation can be much, much more complicated. So let us 
begin with just a single generator. But do not forget to put it in a list anyway. 


We can now redo the example from the very beginning of this chapter. We translate to elements to cycle notation, construct the 
subgroup from two generators (the subgroup is not cyclic), and since the subgroup is abelian, we do not have to view Sage's Cayley 
table as a diagonal reflection of the table in the example. 


Motion Group of a Cube 


We could mimic the example in the text and create elements of S4 as permutations of the diagonals. A more obvious, but less 
insightful, construction is to view the 8 comers of the cube as the items being permuted. Then some obvious symmetries of the 
cube come from running an axis through the center of a side, through to the center of the opposite side, with quarter-turns or half- 
turns about these axes forming symmetries. With three such axes and four rotations per axis, we get 12 symmetries, except we have 
counted the identity permutation two extra times. 


Label the four corners of the square top with 1 through 4, placing 1 in the left-front corner, and following around clockwise when 
viewed from above. Use 5 through 8 for the bottom square's corner, so that 5 is directly below 1, 6 below 2, etc. We will use 
quarter-turns, clockwise, around each axis, when viewed from above, the front, and the right. 


Since we know from the discussion in the text that the symmetry group has 24 elements, we see that our three quarter-turns are 


sufficient to create every symmetry. This prompts several questions which you can find in Exercise 5.6.4. 


This page titled 5.5: Sage is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or curated by Thomas 
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5.6: Sage Exercises 


These exercises are designed to help you become familiar with permutation groups in Sage. 


Create the full symmetric group $j9 with the command G = SymmetricGroup(10) . 


Create elements of G with the following (varying) syntax. Pay attention to commas, quotes, brackets, parentheses. The first 
two use a string (characters) as input, mimicking the way we write permuations (but with commas). The second two use a list 


of tuples. 

© a = G("(5,7,2,9,37478)") 

ay Hee Gl, oa oye) 

e c = G([(1,2),(3,4)]) 

=) d= CCl (4, 3),(2; 5,0) aC 4G; 2,9, 20)) 


1. Compute a*, bc, ad~!b. 

2. Compute the orders of each of these four individual elements( a through dc) using a single permutation group element 
method. 

3. Use the permutation group element method .sign() to determine if a, b,c, d are even or odd permutations. 

4. Create two cyclic subgroups of G with the commands: 
o H = G.subgroup([a]) 
o K = G.subgroup([d]) 


List, and study, the elements of each subgroup. Without using Sage, list the order of each subgroup of kK. Then use Sage to 
construct a subgroup of K with order 10. 


5. More complicated subgroups can be formed by using two or more generators. Construct a subgroup L of G with the 
command L = G.subgroup({[b,c]) . Compute the order of L and list all of the elements of L. 


Construct the group of symmetries of the tetrahedron (also the alternating group on 4 symbols, A,) with the command 

A=AlternatingGroup(4) . Using tools such as orders of elements, and generators of subgroups, see if you can find all 
of the subgroups of A, (each one exactly once). Do this without using the .subgroups() method to justify the 
correctness of your answer (though it might be a convenient way to check your work). 


Provide a nice summary as your answer—not just piles of output. So use Sage as a tool, as needed, but basically your answer 
will be a concise paragraph and/or table. This is the one part of this assignment without clear, precise directions, so spend some 
time on this portion to get it right. Hint: no subgroup of A, requires more than two generators. 


The subsection Motion Group of a Cube describes the 24 symmetries of a cube as a subgroup of the symmetric group Sg 
generated by three quarter-turns. Answer the following questions about this symmetry group. 


1. From the list of elements of the group, can you locate the ten rotations about axes? (Hint: the identity is easy, the other nine 
never send any symbol to itself.) 


2. Can you identify the six symmetries that are a transposition of diagonals? (Hint: 
[g for g in cube if g.order() == 2] isa good preliminary filter.) 
3. Verify that any two of the quarter-tuns( above , front , right )are sufficient to generate the whole group. How 
do you know each pair generates the entire group? 
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4. Can you express one of the diagonal transpositions as a product of quarter-turns? This can be a notoriously difficult 
problem, especially for software. It is known as the “word problem.” 

5. Number the six faces of the cube with the numbers 1 through 6 (any way you like). Now consider the same three 
symmetries we used before (quarter-turns about face-to-face axes), but now view them as permutations of the six faces. In 
this way, we construct each symmetry as an element of Sg. Verify that the subgroup generated by these symmetries is the 
whole symmetry group of the cube. Again, rather than using three generators, try using just two. 


Save your work, and then see if you can crash your Sage session by building the subgroup of $19 generated by the elements 
b and d_ of orders 2 and 30 from above. Do not submit the list of elements of \\ as part of your submitted worksheet. 


What is the order of NV’? 
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CHAPTER OVERVIEW 


6: Cosets and Lagrange's Theorem 


Lagrange's Theorem, one of the most important results in finite group theory, states that the order of a subgroup must divide the 
order of the group. This theorem provides a powerful tool for analyzing finite groups; it gives us an idea of exactly what type of 
subgroups we might expect a finite group to possess. Central to understanding Lagranges's Theorem is the notion of a coset. 

6.1: Cosets 

6.2: Lagrange's Theorem 

6.3: Fermat's and Euler's Theorems 

6.4: Reading Questions 

6.5: Exercises 

6.6: Sage 

6.7: Sage Exercises 
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6.1: Cosets 

Let G be a group and H a subgroup of G. Define a left coset of H with representative g € G to be the set 
gH ={gh:he H}. 

Right cosets can be defined similarly by 
Hg={hg:he H}. 


If left and right cosets coincide or if it is clear from the context to which type of coset that we are referring, we will use the word 
coset without specifying left or right. 


vY Example 6.1 


Let H be the subgroup of Z¢ consisting of the elements 0 and 3. 
Solution 
The cosets are 
0+H=3+H=({0,3} 


1+H=44+H={1,4} 
265 2H — {2 5). 


We will always write the cosets of subgroups of Z and Z, with the additive notation we have used for cosets here. In a 
commutative group, left and right cosets are always identical. 


vY Example 6.2 


Let H be the subgroup of $3 defined by the permutations {(1), (123), (132)}.The left cosets of H are 


(1)H = (123) H = (132) H = {(1), (123), (132)} 
(12)H = (13)H = (23)H = {(12), (13), (23)}. 


The right cosets of H are exactly the same as the left cosets: 


H(1) = H(123) = H(132) ={(1), (123), (132)} 
H(12) = H(13) = H(23) = {(12), (13), (23)}. 


Solution 


It is not always the case that a left coset is the same as a right coset. Let K be the subgroup of $3 defined by the permutations 
{(1), (12)}. Then the left cosets of K are 


however, the right cosets of K are 


The following lemma is quite useful when dealing with cosets. (We leave its proof as an exercise.) 
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& Lemma 6.3 


Let H be a subgroup of a group G and suppose that 91, 92 € G. The following conditions are equivalent. 


1. mH =H; 

2. Hg, ' = Hy"; 
3.9 C 92H; 

4. 92 € 9H; 

5. 9,192 eH. 


In all of our examples the cosets of a subgroup H partition the larger group G. The following theorem proclaims that this will 
always be the case. 


& Theorem 6.4 


Let H be a subgroup of a group G. Then the left cosets of H in G partition G. That is, the group G is the disjoint union of the 
left cosets of H in G. 


Proof 
Let 9; H and gH be two cosets of H in G. We must show that either 9g, HN g2H =@ or gi H =g2H. Suppose that 
9H g2H #0 anda € g,H\g2H. Then by the definition of a left coset, a = gj h1 = g2h2 for some elements h; and 
hg in H. Hence, gi = gohoh;" or gi € go H. By Lemma 6.3, 91 H = goH. 


% Remark 6.5 


There is nothing special in this theorem about left cosets. Right cosets also partition G; the proof of this fact is exactly the 
same as the proof for left cosets except that all group multiplications are done on the opposite side of H. 


Let G bea group and H be a subgroup of G. Define the index of H in G to be the number of left cosets of H in G. We will denote 
the index by [G: H]. 


vY Example 6.6 


Let G = Ze and H = {0, 3}. 
Solution 
Then [G: H] =3. 


vY Example 6.7 


Suppose that G = $3, H = {(1), (123), (132)},and K = {(1), (12)}. 
Solution 


Then [G': H] =2 and [G: K] =3. 


& Theorem 6.8 


Let H be a subgroup of a group G. The number of left cosets of H in G is the same as the number of right cosets of H in G. 


Proof 


Let £y and Ry denote the set of left and right cosets of H in G, respectively. If we can define a bijective map 
¢: Ly — Ru, then the theorem will be proved. If gH € Ly, let (gH) = Hg‘. By Lemma 6.3, the map ¢ is well- 
defined; that is, if g, H = g2H, then Hg, 1 92 1 To show that ¢ is one-to-one, suppose that 
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Hg," = 4(91H) = ¢(g2.H) = Ha," 


Again by Lemma 6.3, 9; H = g2H. The map ¢ is onto since ¢(g-! H) = Hg. 
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6.2: Lagrange's Theorem 


& Proposition 6.9 


Let H be a subgroup of G with g< G and define a map ¢: H + gH by $(h)=gh. The map ¢ is bijective; hence, the 
number of elements in H is the same as the number of elements in gH. 


Proof 


We first show that the map ¢ is one-to-one. Suppose that #(h1) = ¢(h2) for elements hi, h2 € H. We must show that 
hy = he, but d(h1) =ghi and ¢(h2) = ghz. So ghi = gho, and by left cancellation hj = hz. To show that ¢ is onto is 
easy. By definition every element of gH is of the form gh for some h € H and ¢(h) = gh. 


& Theorem 6.10. Lagrange 


Let G be a finite group and let H be a subgroup of G. Then |G|/|H| = |G: H] is the number of distinct left cosets of H in G. 
In particular, the number of elements in H must divide the number of elements in G. 


Proof 


The group G is partitioned into [G : H] distinct left cosets. Each left coset has || elements; therefore, |G| = |G: H]|H]. 


& Corollary 6.11 


Suppose that G is a finite group and g € G. Then the order of g must divide the number of elements in \(G\text{.}\ 


& Corollary 6.12 


Let |G| = p with p a prime number. Then G is cyclic and any g € G such that g # e is a generator. 


Proof 


Let g be in G such that ge. Then by Corollary 6.11, the order of g must divide the order of the group. Since |(g)| > 1, it 
must be p. Hence, g generates G. 


Corollary 6.12 suggests that groups of prime order p must somehow look like Zp. 


& Corollary 6.13 


Let H and K be subgroups of a finite group G such thatG > H > K. Then 
[@: K] =(@: HH: K). 
Proof 
Observe that 
eS as ed eel 


[G: lain ian ee ot 


# Remark 6.14. The converse of Lagrange's Theorem is false 


The group A, has order 12; however, it can be shown that it does not possess a subgroup of order 6. According to Lagrange's 
Theorem, subgroups of a group of order 12 can have orders of either 1, 2, 3, 4, or 6. However, we are not guaranteed that 
subgroups of every possible order exist. To prove that A, has no subgroup of order 6, we will assume that it does have such a 
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subgroup H and show that a contradiction must occur. Since A, contains eight 3-cycles, we know that H must contain a 3- 
cycle. We will show that if H contains one 3-cycle, then it must contain more than 6 elements. 


& Proposition 6.15 


The group A, has no subgroup of order 6. 


Proof 


Since [A : H] = 2, there are only two cosets of H in A4. Inasmuch as one of the cosets is H itself, right and left cosets 
must coincide; therefore, gH = Hg or gHg 1 = H for every g € Ag. Since there are eight 3-cycles in Ag, at least one 3- 
cycle must be in H. Without loss of generality, assume that (123) is in H. Then (123)~+ = (132) must also be in H. Since 
ghg! €H forall g€ Ay andallh € H and 


(124)(123)(124)-! = (124)(123)(142) = (243) 
(243)(123)(243) 1 = (243)(123)(234) = (142) 


we can conclude that H must have at least seven elements 
(1), (123), (132), (243), (243)? = (234), (142), (142)? = (124). 


Therefore, A, has no subgroup of order 6. 


In fact, we can say more about when two cycles have the same length. 


& Theorem 6.16 


Two cycles t and 1 in S,, have the same length if and only if there exists ao € S,, such that p= oto. 


Proof 
Suppose that 


T =(a1,42,..., ak) 
Le = (b1, bo, ..., dy). 


Define o to be the permutation 


o(a1) by 
o(a2) be 
o(ax) = dx. 
Then p=oTo?. 
Conversely, suppose that T = (a1,@2,...,@%) is a k-cycle and 0 € Sy. If o(a;)=6 and o(a¢moak)41) =8', then 


(b) = 0’. Hence, 


bt = (o(a1), o(a2),-..,0(ax)). 


Since o is one-to-one and onto, jz is a cycle of the same length as T. 


This page titled 6.2: Lagrange's Theorem is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or 
curated by Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the 
LibreTexts platform; a detailed edit history is available upon request. 


https ://math.libretexts.org/@go/page/81068 


GNU Free Documentation License 


Oibreexts” 


6.3: Fermat's and Euler's Theorems 
The Euler ¢-function is the map ¢: N > N defined by ¢(n) =1 for n =1, and, for n >1, (mn) is the number of positive 
integers m with 1 <m <n and gcd(m,n) =1. 


From Proposition 3.4, we know that the order of U(n), the group of units in Z,, is @(n). For example, |U(12)| = (12) =4 
since the numbers that are relatively prime to 12 are 1, 5, 7, and 11. For any prime p, ¢(p) =p —1. We state these results in the 
following theorem. 


& Theorem 6.17 


Let U(n) be the group of units in Z,,. Then |U(n)| = ¢(n). 


The following theorem is an important result in number theory, due to Leonhard Euler. 


& Theorem 6.18. Euler's Theorem 


Let a and n be integers such that n > 0 and gcd(a,n) =1. Then a%") =1 (mod n). 


Proof 


By Theorem 6.17 the order of U(n) is ¢(nm). Consequently, a?(”) =1 for all a€ U(n); or a®") —1 is divisible by n. 
Therefore, a®(”) =1 (mod n). 


If we consider the special case of Euler's Theorem in which n = p is prime and recall that ¢(p) = p—1, we obtain the following 
result, due to Pierre de Fermat. 


& Theorem 6.19. Fermat's Little Theorem 


Let p be any prime number and suppose that p\notdividea (p does not divide a). Then 
a? +=1 (mod p). 


Furthermore, for any integer b, \(b‘p \equiv b \pmod{ p}\text{.}\ 


Historical Note 


Joseph-Louis Lagrange (1736-1813), born in Turin, Italy, was of French and Italian descent. His talent for mathematics became 
apparent at an early age. Leonhard Euler recognized Lagrange's abilities when Lagrange, who was only 19, communicated to Euler 
some work that he had done in the calculus of variations. That year he was also named a professor at the Royal Artillery School in 
Turin. At the age of 23 he joined the Berlin Academy. Frederick the Great had written to Lagrange proclaiming that the “greatest 
king in Europe” should have the “greatest mathematician in Europe” at his court. For 20 years Lagrange held the position vacated 
by his mentor, Euler. His works include contributions to number theory, group theory, physics and mechanics, the calculus of 
variations, the theory of equations, and differential equations. Along with Laplace and Lavoisier, Lagrange was one of the people 
responsible for designing the metric system. During his life Lagrange profoundly influenced the development of mathematics, 
leaving much to the next generation of mathematicians in the form of examples and new problems to be solved. 
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6.4: Reading Questions 


State Lagrange's Theorem in your own words. 
Determine the left cosets of (3) in Zg. 
The set {(), (1 2)(3 4), (13)(2 4), (1 4)(2 3) }is a subgroup of $4. What is its index in S4? 


Suppose G is a group of order 29. Describe G. 


fe 
EZ 
= 
fe 
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6.5: Exercises 


Suppose that G is a finite group with an element g of order 5 and an element A of order 7. Why must |G| > 35? 
Suppose that G is a finite group with 60 elements. What are the orders of possible subgroups of G? 
Prove or disprove: Every subgroup of the integers has finite index. 


Prove or disprove: Every subgroup of the integers has finite order. 


E 
fr 
E 


List the left and right cosets of the subgroups in each of the following. 


1. (8) in Z24 

2. (3) in U(8) 

3. 3ZinZ 

4. A, in S4 

5. Ay in Sn 

6. D4 in S4 

7.T in C* 

8. H = {(1), (123), (132)}in Sz 


Describe the left cosets of SL (R) in GL2(R). What is the index of SL2(R) in GL2(R)? 


Verify Euler's Theorem forn =15 anda =4. 


Use Fermat's Little Theorem to show that if p = 4n + 3 is prime, there is no solution to the equation z? = —1 (mod p). 


Show that the integers have infinite index in the additive group of rational numbers. 


= 


eS 
c 
cz 
c 


Show that the additive group of real numbers has infinite index in the additive group of the complex numbers. 
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Let H be a subgroup of a group G and suppose that gi, g2 € G. Prove that the following conditions are equivalent. 
1. mH =H 
2. Hg, * = Hz" 
3.9 H CgoH 
4.9. € mH 
5. 9) 19, € H 


If ghg 1 € H forall g¢ G andh € H, show that right cosets are identical to left cosets. That is, show that gH = Hg for all 
gEeG. 


What fails in the proof of Theorem 6.8 if ¢: Ly — Ry is defined by (gH) = Hg? 


Suppose that g” =e. Show that the order of g divides n. 


The cycle structure of a permutation o is defined as the unordered list of the sizes of the cycles in the cycle decomposition o. 
For example, the permutation o = (12)(345)(78)(9) has cycle structure (2, 3, 2, 1) which can also be written as (1, 2, 2, 3). 


Show that any two permutations a, 6 € S,, have the same cycle structure if and only if there exists a permutation -y such that 
B=yay'.IfB = yay" for some y € Sp, then a and f are conjugate. 


S 
5 
I 


2, prove that gH = Hg. 


| Let H and K be subgroups of a group G. Prove that gH M gK is acoset of HONK inG. 


Let H and K be subgroups of a group G. Define a relation ~ on G by a ~ 0 if there exists anh € H andak€ K such that 
hak = b. Show that this relation is an equivalence relation. The corresponding equivalence classes are called double cosets. 


Compute the double cosets of H = {(1), (123), (132)}in Ag. 
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Let G be a cyclic group of order n. Show that there are exactly ¢(n) generators for G. 


Let n = pi'p}---pi*, where pi, p2,---, px are distinct primes. Prove that 


Show that 


n= > ¢(d) 


d\n 


for all positive integers n. 
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6.6: Sage 


Sage can create all of the cosets of a subgroup, and all of the subgroups of a group. While these methods can be somewhat slow, 
they are in many, many ways much better than experimenting with pencil and paper, and can greatly assist us in understanding the 
structure of finite groups. 


Cosets 


Sage will create all the right (or left) cosets of a subgroup. Written mathematically, cosets are sets, and the order of the elements 
within the set is irrelevant. With Sage, lists are more natural, and here it is to our advantage. 


Sage creates the cosets of a subgroup as a list of lists. Each inner list is a single coset. The first coset is always the coset that is the 
subgroup itself, and the first element of this coset is the identity. Each of the other cosets can be construed to have their first 
element as their representative, and if you use this element as the representative, the elements of the coset are in the same order 
they would be created by multiplying this representative by the elements of the first coset (the subgroup). 


The keyword side canbe ‘right' or ‘left' , and if not given, then the default is right cosets. The options refer to 
which side of the product has the representative. Notice that now Sage's results will be “backwards” compared with the text. Here 
is Example 6.2 reprised, but in a slightly different order. 


So if we work our way through the brackets carefully we can see the difference between the right cosets and the left cosets. 
Compare these cosets with the ones in the text and see that left and right are reversed. Shouldn't be a problem — just keep it in 
mind. 


If we study the bracketing, we can see that the left and right cosets are equal. Let's see what Sage thinks: 


Mathematically, we need sets, but Sage is working with ordered lists, and the order matters. However, if we know our lists do not 
have duplicates (the .cosets() method will never produce duplicates) then we can sort the lists and a test for equality will 
perform as expected. The elements of a permutation group have an ordering defined for them — it is not so important what this is, 
just that some ordering is defined. The sorted() function will take any list and return a sorted version. So for each list of 
cosets, we will sort the individual cosets and then sort the list of sorted cosets. This is a typical maneuver, though a bit complicated 
with the nested lists. 


The list of all cosets can be quite long (it will include every element of the group) and can take a few seconds to complete, even for 
small groups. There are more sophisticated, and faster, ways to study cosets (such as just using their representatives), but to 
understand these techniques you also need to understand more theory. 


Subgroups 


Sage can compute all of the subgroups of a group. This can produce even more output than the coset method and can sometimes 
take much longer, depending on the structure of the group. The list is in order of the size of the subgroups, with smallest first. As a 
demonstration we will first compute and list all of the subgroups of a small group, and then extract just one of these subgroups 
from the list for some futher study. 


The output of the .Ssubgroups() method can be voluminous, so sometimes we are interested in properties of specific 
subgroups (as in the previous example) or broader questions of the group's “subgroup structure.” Here we expand on Proposition 
6.15. Notice that just because Sage does not compute a subgroup of order 6 in Ay, this is no substitute whatsoever for a proof such 
as given for the corollary. But the computational result emboldens us to search for the theoretical result with confidence. 


So we see no subgroup of order 6 in the list of subgroups of A,. Notice how Lagrange's Theorem (Theorem 6.10) is in evidence — 
all the subgroup orders divide 12, the order of A,. Be patient, the next subgroup computation may take a while. 


Again, note Lagrange's Theorem in action. But more interestingly, 54 has a subgroup of order 6. Four of them, to be precise. These 
four subgroups of order 6 are similar to each other, can you describe them simply (before digging into the sg_ list for more 
information)? If you were curious how many subgroups 4 has, you could simply count the number of subgroups in the sqg_ list. 
The len() function does this for any list and is often an easy way to count things. 
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Subgroups of Cyclic Groups 


Now that we are more familiar with permutation groups, and know about the .subgroups() method, we can revisit an idea 
from Chapter 4. The subgroups of a cyclic group are always cyclic, but how many are there and what are their orders? 


We could do this all day, but you have Sage at your disposal, so vary the order of G by changing n_ and study the output across 
many runs. Maybe try a cyclic group of order 24 and compare with the symmetric group 54 (above) which also has order 24. Do 
you feel a conjecture coming on? 

Euler Phi Function 


To add to our number-theoretic functions from Chapter 2, we note that Sage makes the Euler #-function available as the function 
euler_phi() . 


Here's an interesting experiment that you can try running several times. 
Feel another conjecture coming on? Can you generalize this result? 
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6.7: Sage Exercises 


The following exercises are less about cosets and subgroups, and more about using Sage as an experimental tool. They are designed 
to help you become both more efficient, and more expressive, as you write commands in Sage. We will have many opportunities to 
work with cosets and subgroups in the coming chapters. These exercises do not contain much guidance, and get more challenging 
as they go. They are designed to explore, or confirm, results presented in this chapter or earlier chapters. 


Important: You should answer each of the last three problems with a single (complicated) line of Sage that concludes by outputting 

True . A “single line” means you will have several Sage commands packaged up together in complicated ways. It does not mean 
several Sage commands seperated by semi-colons and typed in on a single line. Be sure include some intermediate steps used in 
building up your solution, but using smaller ranges of values so as to not overwhelm the reader with lots of output. This will help 
you, and the grader of your work, have some confidence that the final version is correct. 


When you check integers below for divisibility, remember that range() produces plain integers, which are quite simple in their 
functionality. The srange() command produces Sage integers, which have many more capabilities. (See the last exercise for 
an example.) And remember that a list comprehension is a very compact way to examine many possibilities at once. 


Use .subgroups() to find an example of a group G and an integer m, so that (a) m divides the order of G, and (b) G 
has no subgroup of order m. (Do not use the group A, for G, since this is in the text.) Provide a single line of Sage code that 
has all the logic to produce the desired m as its output. (You can give your group a simple name on a prior line and then just 
reference the group by name.) Here is a very simple example that might help you structure your answer. 


Verify the truth of Fermat's Little Theorem (either variant) using the composite number 391 = 17 - 23 as the choice of the base 
(either a or b), and for p assuming the value of every prime number between 100 and 1000. 


Build up a solution slowly — make a list of powers (start with just a few primes), then make a list of powers reduced by 
modular arithmetic, then a list of comparisons with the predicted value, then a check on all these logical values resulting from 
the comparisons. This is a useful strategy for many similar problems. Eventually you will write a single line that performs the 
verification by eventually printing out True . Here are some more hints about useful functions. 


Verify that the group of units mod n has order n —1 when n is prime, again for all primes between 100 and 1000. As before, 
your output should be simply True , just once, indicating that the statement about the order is true for all the primes 
examined. As before, build up your solution slowly, and with a smaller range of primes in the beginning. Express your answer 
as a Single line of Sage code. 


Verify Euler's Theorem for all values of 0 <n <100 and for 1 <a<n. This will require nested for statements with a 
conditional. Again, here is a small example that might be helpful for constructing your one line of Sage code. Note the use of 
srange() inthis example. 


The symmetric group on 7 symbols, S7, has 7! = 5040 elements. Consider the following questions without employing Sage, 
based on what we know about orders of elements of permutation groups (Exercise 5.4.13). 


e What is the maximum possible order? 
e How many elements are there of order 10? 
e How many elements are there of order 1? 
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e How many elements are there of order 2? 
e What is the smallest positive integer for which there is no element with that order? 


These questions will be easier if you are familiar with using binomial coefficients for counting in similarly complex situations. 
But either way, give some serious thought to each question (and maybe a few of your own) before firing up Sage. 


Now, compute how many elements there are of each order using the .order() method, and then embed this into a list 
comprehension which creates a single list of these counts. You can check your work (or check Sage) by wrapping this list in 
sum() and hopefully getting 5040. 


Comment on the process of studying these questions first without any computational aid, and then again with Sage. For which 
values of n do you think Sage would be too slow and your mind quicker? 
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CHAPTER OVERVIEW 


7: Introduction to Cryptography 


Cryptography is the study of sending and receiving secret messages. The aim of cryptography is to send messages across a channel 
so that only the intended recipient of the message can read it. In addition, when a message is received, the recipient usually requires 
some assurance that the message is authentic; that is, that it has not been sent by someone who is trying to deceive the recipient. 
Modern cryptography is heavily dependent on abstract algebra and number theory. 


The message to be sent is called the plaintext message. The disguised message is called the ciphertext. The plaintext and the 
ciphertext are both written in an alphabet, consisting of letters or characters. Characters can include not only the familiar 
alphabetic characters A, ..., Z anda, ..., z but also digits, punctuation marks, and blanks. A cryptosystem, or cipher, has two 
parts: encryption, the process of transforming a plaintext message to a ciphertext message, and decryption, the reverse 
transformation of changing a ciphertext message into a plaintext message. 

There are many different families of cryptosystems, each distinguished by a particular encryption algorithm. Cryptosystems in a 
specified cryptographic family are distinguished from one another by a parameter to the encryption function called a key. A 
classical cryptosystem has a single key, which must be kept secret, known only to the sender and the receiver of the message. If 
person A wishes to send secret messages to two different people B and C, and does not wish to have B understand C's messages 
or vice versa, A must use two separate keys, so one cryptosystem is used for exchanging messages with B, and another is used for 
exchanging messages with C. 


Systems that use two separate keys, one for encoding and another for decoding, are called public key cryptosystems. Since 
knowledge of the encoding key does not allow anyone to guess at the decoding key, the encoding key can be made public. A public 
key cryptosystem allows A and B to send messages to C' using the same encoding key. Anyone is capable of encoding a message 
to be sent to C’, but only C' knows how to decode such a message. 

7.1: Private Key Cryptography 

7.2: Public Key Cryptography 

7.3: Reading Questions 

7.4: Exercises 

7.5: Additional Exercises- Primality and Factoring 

7.6: References and Suggested Readings 

7.7: Sage 

7.8: Sage Exercises 
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7.1: Private Key Cryptography 


In single or private key cryptosystems the same key is used for both encrypting and decrypting messages. To encrypt a plaintext 
message, we apply to the message some function which is kept secret, say f. This function will yield an encrypted message. Given 
the encrypted form of the message, we can recover the original message by applying the inverse transformation f—!. The 
transformation f must be relatively easy to compute, as must f 1; however, f must be extremely difficult to guess from available 
examples of coded messages. 


One of the first and most famous private key cryptosystems was the shift code used by Julius Caesar. We first digitize the 
alphabet by letting A = 00,B =01,...,Z=25. The encoding function will be 


f(p) =p+3 mod 26; 
thatis, AW D, BH E,..., ZC. 
Solution 
The decoding function is then 
f 1 (p) =p —3 mod 26 = p+ 23 mod 26. 

Suppose we receive the encoded message DOJHEUD. To decode this message, we first digitize it: 

3,14, 9, 7, 4, 20, 3. 
Next we apply the inverse transformation to get 

0,11,6,4,1,17,0, 
or ALGEBRA. Notice here that there is nothing special about either of the numbers 3 or 26. We could have used a larger 


alphabet or a different shift. 


Cryptanalysis is concerned with deciphering a received or intercepted message. Methods from probability and statistics are great 
aids in deciphering an intercepted message; for example, the frequency analysis of the characters appearing in the intercepted 
message often makes its decryption possible. 


Suppose we receive a message that we know was encrypted by using a shift transformation on single letters of the 26-letter 
alphabet. To find out exactly what the shift transformation was, we must compute b in the equation f(p) =p +b mod 26. 


Solution 


We can do this using frequency analysis. The letter E = 04 is the most commonly occurring letter in the English language. 
Suppose that S=18 is the most commonly occurring letter in the ciphertext. Then we have good reason to suspect that 
18 =4+b mod 26, orb = 14. Therefore, the most likely encrypting function is 


f(p) =p +14 mod 26. 
The corresponding decrypting function is 
f+ (p) =p+12 mod 26. 


It is now easy to determine whether or not our guess is correct. 


Simple shift codes are examples of monoalphabetic cryptosystems. In these ciphers a character in the enciphered message 
represents exactly one character in the original message. Such cryptosystems are not very sophisticated and are quite easy to break. 
In fact, in a simple shift as described in Example 7.1, there are only 26 possible keys. It would be quite easy to try them all rather 
than to use frequency analysis. 
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Let us investigate a slightly more sophisticated cryptosystem. Suppose that the encoding function is given by 
f(p) =ap +b mod 26. 
We first need to find out when a decoding function f~ exists. Such a decoding function exists when we can solve the equation 
c=ap+b mod 26 
for p. By Proposition 3.4, this is possible exactly when a has an inverse or, equivalently, when gcd(a, 26) = 1. In this case 
f-\(p) =a 1p—a 1b mod 26. 


Such a cryptosystem is called an affine cryptosystem. 


Let us consider the affine cryptosystem f(p) = ap +b mod 26. 
Solution 


For this cryptosystem to work we must choose an a € Zog¢ that is invertible. This is only possible if gcd(a, 26) = 1. 
Recognizing this fact, we will let a=5 since gcd(5, 26) = 1. It is easy to see that a! = 21. Therefore, we can take our 
encryption function to be f(p) =5p+3 mod 26. Thus, ALGEBRA is encoded as 3, 6,7, 23, 8, 10,3,or DGHXIKD. The 
decryption function will be 


f | (p) =21p —21-3 mod 26 = 21p +15 mod 26. 
A cryptosystem would be more secure if a ciphertext letter could represent more than one plaintext letter. To give an example of 
this type of cryptosystem, called a polyalphabetic cryptosystem, we will generalize affine codes by using matrices. The idea works 


roughly the same as before; however, instead of encrypting one letter at a time we will encrypt pairs of letters. We can store a pair 
of letters p; and p2 in a vector 
Pi 
p= . 
p2 


Let A bea 2 x 2 invertible matrix with entries in Z2g. We can define an encoding function by 


f(p) =Ap +b, 
where b is a fixed column vector and matrix operations are performed in Zyg. The decoding function must be 


f\(p)=A'p-A'b. 


Y Example 7.4 


Suppose that we wish to encode the word HELP. The corresponding digit string is 7,4, 11, 15.If 


ne 6 5 
il 2 
Solution 


then 


al = 
85 2° 


If b = (2, Dt aneeere: then our message is encrypted as RRGR. The encrypted letter R represents more than one plaintext 
letter. 


Frequency analysis can still be performed on a polyalphabetic cryptosystem, because we have a good understanding of how pairs of 
letters appear in the English language. The pair th appears quite often; the pair qz never appears. To avoid decryption by a third 
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party, we must use a larger matrix than the one we used in Example 7.4. 


This page titled 7.1: Private Key Cryptography is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or 


curated by Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the 
LibreTexts platform; a detailed edit history is available upon request. 
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7.2: Public Key Cryptography 


If traditional cryptosystems are used, anyone who knows enough to encode a message will also know enough to decode an 
intercepted message. In 1976, W. Diffie and M. Hellman proposed public key cryptography, which is based on the observation that 
the encryption and decryption procedures need not have the same key. This removes the requirement that the encoding key be kept 
secret. The encoding function f must be relatively easy to compute, but f ! must be extremely difficult to compute without some 
additional information, so that someone who knows only the encrypting key cannot find the decrypting key without prohibitive 
computation. It is interesting to note that to date, no system has been proposed that has been proven to be “one-way;” that is, for 
any existing public key cryptosystem, it has never been shown to be computationally prohibitive to decode messages with only 
knowledge of the encoding key. 


The RSA Cryptosystem 


The RSA cryptosystem introduced by R. Rivest, A. Shamir, and L. Adleman in 1978, is based on the difficulty of factoring large 
numbers. Though it is not a difficult task to find two large random primes and multiply them together, factoring a 150-digit number 
that is the product of two large primes would take 100 million computers operating at 10 million instructions per second about 50 
million years under the fastest algorithms available in the early 1990s. Although the algorithms have improved, factoring a number 
that is a product of two large primes is still computationally prohibitive. 


The RSA cryptosystem works as follows. Suppose that we choose two random 150-digit prime numbers p and q. Next, we compute 
the product n = pq and also compute ¢(n) =m =(p—1)(q—1), where ¢ is the Euler ¢-function. Now we start choosing 
random integers £ until we find one that is relatively prime to m; that is, we choose & such that gcd(£,m) =1. Using the 
Euclidean algorithm, we can find a number D such that DE =1 (mod m). The numbers n and E are now made public. 


Suppose now that person B (Bob) wishes to send person A (Alice) a message over a public line. Since & and n are known to 
everyone, anyone can encode messages. Bob first digitizes the message according to some scheme, say 
A=00,B=02,...,Z=25. If necessary, he will break the message into pieces such that each piece is a positive integer less 
than n. Suppose a is one of the pieces. Bob forms the number y=2"” mod n and sends y to Alice. For Alice to recover x, she 
need only compute x = y? mod n. Only Alice knows D. 


Before exploring the theory behind the RSA cryptosystem or attempting to use large integers, we will use some small integers 
just to see that the system does indeed work. Suppose that we wish to send some message, which when digitized is 25. Let 
p=23 andq=29. 


Solution 
Then 
n = pq = 667 
and 
$(n) =m =(p—1)(q—1) = 616. 
We can let # = 487, since gcd(616, 487) = 1. The encoded message is computed to be 
25487 mod 667 = 169. 


This computation can be reasonably done by using the method of repeated squares as described in Chapter 4. Using the 
Euclidean algorithm, we determine that 191f/ =1+4 151m; therefore, the decrypting key is (n, D) = (667,191). We can 
recover the original message by calculating 


169)! mod 667 = 25. 


Now let us examine why the RSA cryptosystem works. We know that DE =1 (mod m); hence, there exists a & such that 


DE =km+1=k@¢(n) +1. 
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There are two cases to consider. In the first case assume that gcd(z,n) = 1. Then by Theorem 6.18, 


y? = (aF YP = aPE = ght) — (2 9("))ke = (1)*2 = 2 modn. 
So we see that Alice recovers the original message x when she computes y? mod n. 


For the other case, assume that gcd(z,n) #1. Since n = pq and x <n, we know z is a multiple of p or a multiple of g, but not 
both. We will describe the first possibility only, since the second is entirely similar. There is then an integer r, with r <q and 
x =rp. Note that we have gcd(z, q) = 1 and that m = ¢(n) = (p—1)(¢—1) = $(p)(q). Then, using Theorem 6.18, but now 
mod q, 


hm — gko(r)$(9) — (g(a) ko(P) — (1)*4(?) — 1 mod q. 


So there is an integer t such that x*” = 1-+tq. Thus, Alice also recovers the message in this case, 


y? =akr! — ghey — (14+ tg)z2 =2+1tq(rp) =2 +trn =z modn. 


We can now ask how one would go about breaking the RSA cryptosystem. To find D given n and F, we simply need to factor n 
and solve for D by using the Euclidean algorithm. If we had known that 667 = 23 - 29 in Example 7.5, we could have recovered 
D. 


Message Verification 


There is a problem of message verification in public key cryptosystems. Since the encoding key is public knowledge, anyone has 
the ability to send an encoded message. If Alice receives a message from Bob, she would like to be able to verify that it was Bob 
who actually sent the message. Suppose that Bob's encrypting key is (n’, £’) and his decrypting key is (n’, D’). Also, suppose that 
Alice's encrypting key is (n, #) and her decrypting key is (n, D). Since encryption keys are public information, they can exchange 
coded messages at their convenience. Bob wishes to assure Alice that the message he is sending is authentic. Before Bob sends the 
message z to Alice, he decrypts x with his own key: 


D 


J 
z'’=2” modn’. 


Anyone can change z’ back to x just by encryption, but only Bob has the ability to form z’. Now Bob encrypts x’ with Alice's 
encryption key to form 


1 9 d 
y =x modn, 


a message that only Alice can decode. Alice decodes the message and then encodes the result with Bob's key to read the original 
message, a message that could have only been sent by Bob. 


Historical Note 


Encrypting secret messages goes as far back as ancient Greece and Rome. As we know, Julius Caesar used a simple shift code to 
send and receive messages. However, the formal study of encoding and decoding messages probably began with the Arabs in the 
1400s. In the fifteenth and sixteenth centuries mathematicians such as Alberti and Viete discovered that monoalphabetic 
cryptosystems offered no real security. In the 1800s, F. W. Kasiski established methods for breaking ciphers in which a ciphertext 
letter can represent more than one plaintext letter, if the same key was used several times. This discovery led to the use of 
cryptosystems with keys that were used only a single time. Cryptography was placed on firm mathematical foundations by such 
people as W. Friedman and L. Hill in the early part of the twentieth century. 


The period after World War I saw the development of special-purpose machines for encrypting and decrypting messages, and 
mathematicians were very active in cryptography during World War II. Efforts to penetrate the cryptosystems of the Axis nations 
were organized in England and in the United States by such notable mathematicians as Alan Turing and A. A. Albert. The Allies 
gained a tremendous advantage in World War II by breaking the ciphers produced by the German Enigma machine and the 
Japanese Purple ciphers. 


By the 1970s, interest in commercial cryptography had begun to take hold. There was a growing need to protect banking 
transactions, computer data, and electronic mail. In the early 1970s, IBM developed and implemented LUZIFER, the forerunner of 
the National Bureau of Standards' Data Encryption Standard (DES). 
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The concept of a public key cryptosystem, due to Diffie and Hellman, is very recent (1976). It was further developed by Rivest, 
Shamir, and Adleman with the RSA cryptosystem (1978). It is not known how secure any of these systems are. The trapdoor 
knapsack cryptosystem, developed by Merkle and Hellman, has been broken. It is still an open question whether or not the RSA 
system can be broken. In 1991, RSA Laboratories published a list of semiprimes (numbers with exactly two prime factors) with a 
cash prize for whoever was able to provide a factorization (http://www.eme.com/emc-plus/rsa-labs/historical/the-rsa-challenge- 
numbers.htm). Although the challenge ended in 2007, many of these numbers have not yet been factored. 


There been a great deal of controversy about research in cryptography and cryptography itself. In 1929, when Henry Stimson, 
Secretary of State under Herbert Hoover, dismissed the Black Chamber (the State Department's cryptography division) on the 
ethical grounds that “gentlemen do not read each other's mail.” During the last two decades of the twentieth century, the National 
Security Agency wanted to keep information about cryptography secret, whereas the academic community fought for the right to 
publish basic research. Currently, research in mathematical cryptography and computational number theory is very active, and 
mathematicians are free to publish their results in these areas. 


This page titled 7.2: Public Key Cryptography is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or 
curated by Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the 


LibreTexts platform; a detailed edit history is available upon request. 
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7.3: Reading Questions 


Use the euler _phi() function in Sage to compute 4(893 456 123). 


Use the power_mod() function in Sage to compute oe (mod 895). 


This page titled 7.3: Reading Questions is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or 
curated by Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the 
LibreTexts platform; a detailed edit history is available upon request. 
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7.4: Exercises 


Encode IXLOVEXMATH using the cryptosystem in Example 7.1. 


| Decode ZLOOA WKLVA EHARQ WKHA ILQDO , which was encoded using the cryptosystem in Example 7.1. 


Assuming that monoalphabetic code was used to encode the following secret message, what was the original message? 
APHUO EGEHP PEXOV FKEUH CKVUE CHKVE APHUO 
EGEHU EXOVL EXDKT VGEFT EHFKE UHCKF TZEXO 


VEZDT TVKUE XOVKV ENOHK ZFTEH TEHKQ LEROF 
PVEHP PEXOV ERYKP GERYT GVKEG XDRTE RGAGA 


What is the significance of this message in the history of cryptography? 
| What is the total number of possible monoalphabetic cryptosystems? How secure are such cryptosystems? 


| Prove that a 2 x 2 matrix A with entries in Zyg is invertible if and only if gcd(det(A), 26) = 1. 


Given the matrix 
4 
A J ; 
23 
use the encryption function f(p) = Ap +b to encode the message CRYPTOLOGY , where b = (2, 5)\‘"@?SP°8°, What is the 
decoding function? 


Encrypt each of the following RSA messages z so that x is divided into blocks of integers of length 2; that is, if ¢ = 142528, 
encode 14, 25, and 28 separately. 


1.n= 3551, F = 629,72 =31 

2.n = 2257, B= 47,2 = 23 

3.n = 120979, FE = 13251, « = 142371 
4.n = 45629, F = 781, x = 231561 


GNU Free Documentation License https ://math.libretexts.org/@go/page/81078 


Oibretexts: 


Compute the decoding key D for each of the encoding keys in Exercise 7.4.7. 


Decrypt each of the following RSA messages y. 


1.n=3551, D=1997,y =2791 

2.n =5893, D=81,y =34 

3. n = 120979, D = 27331, y = 112135 
4.n = 79403, D =671, y = 129381 


For each of the following encryption keys (n, &) in the RSA cryptosystem, compute D. 
1. (n, B) = (451, 231) 


2. (n, E) = (3053, 1921) 
3. (n, E) = (37986733, 12371) 
4, (n, E) = (16394854313, 34578451) 


Encrypted messages are often divided into blocks of n letters. A message such as THE WORLD WONDERS WHY might be 
encrypted as JIW OCFRJ LPOEVYQ IOC but sent as JIW OCF RJL POE VYQ IOC . What are the advantages of 
using blocks of n letters? 


Find integers n, &, and X such that 


Is this a potential problem in the RSA cryptosystem? 


Every person in the class should construct an RSA cryptosystem using primes that are 10 to 15 digits long. Hand in (n, ) and 
an encoded message. Keep D secret. See if you can break one another's codes. 


This page titled 7.4: Exercises is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or curated by 
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7.5: Additional Exercises- Primality and Factoring 


In the RSA cryptosystem it is important to be able to find large prime numbers easily. Also, this cryptosystem is not secure if we 
can factor a composite number that is the product of two large primes. The solutions to both of these problems are quite easy. To 
find out if a number n is prime or to factor n, we can use trial division. We simply divide n by d=2,3,...,./n. Either a 
factorization will be obtained, or n is prime if no d divides n. The problem is that such a computation is prohibitively time- 
consuming if n is very large. 


A better algorithm for factoring odd positive integers is Fermat's factorization algorithm. 


1. Let n = ab be an odd composite number. Prove that n can be written as the difference of two perfect squares: 
oo A®) 
n=2 —y =(r—y)(z+y). 
Consequently, a positive odd integer can be factored exactly when we can find integers x and y such that n = x? — y?. 


2. Write a program to implement the following factorization algorithm based on the observation in part (a). The expression 
ceiling(sqrt(n)) means the smallest integer greater than or equal to the square root of n. Write another program 
to do factorization using trial division and compare the speed of the two algorithms. Which algorithm is faster and why? 


x := ceiling(sqrt(n) ) 
all 


1 : while x42 - yA2 > n do 
a 7 ae al 


1f x42 - yA2 < n then 


ne GS ee ae al 
yi:=1 
goto 1 
else if x42 - yA2 = © then 
ai=x-y 
bos = ey 


write n=a* b 


Primality Testing 


Recall Fermat's Little Theorem from Chapter 6. Let p be prime with gcd(a,p) =1. Then a? 1 =1 (mod p). We can use 
Fermat's Little Theorem as a screening test for primes. For example, 15 cannot be prime since 


0) = Ae anod 15): 
However, 17 is a potential prime since 

217-1 =916=1 (mod 17). 
We say that an odd composite number n is a pseudoprime if 


2°1=1 (mod n). 


Which of the following numbers are primes and which are pseudoprimes? 


1. 342 
2. 811 
3. 601 
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4.561 
5. 771 
6. 631 


Let n be an odd composite number and 6 be a positive integer such that gcd(b,n) = 1. If ees | (mod n), then n is a 
pseudoprime base b. Show that 341 is a pseudoprime base 2 but not a pseudoprime base 3. 


Write a program to determine all primes less than 2000 using trial division. Write a second program that will determine all 
numbers less than 2000 that are either primes or pseudoprimes. Compare the speed of the two programs. How many 
pseudoprimes are there below 2000? 


There exist composite numbers that are pseudoprimes for all bases to which they are relatively prime. These numbers are 
called Carmichael numbers. The first Carmichael number is 561 = 3-11-17. In 1992, Alford, Granville, and Pomerance 
proved that there are an infinite number of Carmichael numbers [4]. However, Carmichael numbers are very rare. There are 
only 2163 Carmichael numbers less than 25 x 10°. For more sophisticated primality tests, see [1], [6], or [7]. 
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7.7: Sage 


Since Sage began as software to support research in number theory, we can quickly and easily demonstrate the internal workings of 
the RSA algorithm. Recognize that, in practice, many other details such as encoding between letters and integers, or protecting 
one's private key, are equally important for the security of communications. So RSA itself is just the theoretical foundation. 


Constructing Keys 


We will suppose that Alice wants to send a secret message to Bob, along with message verification (also known as a message with 
a digital signature). So we begin with the construction of key pairs (private and public) for both Alice and Bob. We first need two 
large primes for both individuals, and their product. In practice, values of n would have hundreds of digits, rather than just 21 as 
we have done here. 


Computationally, the value of the Euler ¢-function for a product of primes pq can be obtained from (p —1)(q—1), but we could 
use Sage's built-in function just as well. 


Now we can create the encryption and decryption exponents. We choose the encryption exponent as a (small) number relatively 
prime to the value of m. With Sage we can factor m quickly to help us choose this value. In practice we would not want to do this 
computation for large values of m, so we might more easily choose “random” values and check for the first value which is 
relatively prime to m. The decryption exponent is the multiplicative inverse, mod m, of the encryption exponent. If you construct 
an improper encryption exponent (not relatively prime to m), the computation of the multiplicative inverse will fail (and Sage will 
tell you so). We do this twice —- for both Alice and Bob. 


At this stage, each individual would publish their values of n and E, while keeping D very private and secure. In practice D 
should be protected on the user's hard disk by a password only the owner knows. For even greater security a person might only 
have two copies of their private key, one on a USB memory stick they always carry with them, and a backup in their sage deposit 
box. Every time the person uses D they would need to provide the password. The value of m can be discarded. For the record, here 
are all the keys: 


Signing and Encoding a Message 


Alice is going to construct a message as an English word with four letters. From these four letters we will construct a single number 
to represent the message in a form we can use in the RSA algorithm. The function ord() will convert a single letter to its 
ASCII code value, a number between 0 and 127. If we use these numbers as “digits” mod 128, we can be sure that Alice's four- 
letter word will encode to an integer less than 128* = 268, 435, 456. The particular maximum value is not important, so long as it 
is smaller than our value of n since all of our subsequent arithmetic is mod n. We choose a popular four-letter word, convert to 
ASCII “digits” with a list comprehension, and then construct the integer from the digits with the right base. Notice how we can 
treat the word as a list and that the first digit in the list is in the “ones” place (we say the list is in “little-endian” order). 


First, Alice will sign her message to provide message verification. She uses her private key for this, since this is an act that only she 
should be able to perform. 


Then Alice encrypts her message so that only Bob can read it. To do this, she uses Bob's public key. Notice how she does not have 
to even know Bob — for example, she could have obtained Bob's public key off his web site or maybe Bob announced his public 
key in an advertisement in the New York Times. 


Alice's communication is now ready to travel on any communications network, no matter how insecure the network may be, and no 
matter how many snoops may be monitoring the network. 


Decoding and Verifying a Message 


Now assume that the value of encrypted has reached Bob. Realize that Bob may not know Alice, and realize that Bob does 
not even necessarily believe what he has received has genuinely originated from Alice. An adversary could be trying to confuse 
Bob by sending messages that claim to be from Alice. First, Bob must unwrap the encyption Alice has provided. This is an act only 
Bob, as the intended recipient, should be able to do. And he does it by using his private key, which only he knows, and which he 
has kept secure. 


Right now, this means very little to Bob. Anybody could have sent him an encoded message. However, this was a message Alice 
signed. Lets unwrap the message signing. Notice that this uses Alice's public key. Bob does not need to know Alice — for example, 
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he could obtain Alice's key off her web site or maybe Alice announced her public key in an advertisement in the New York Times. 


Bob needs to transform this integer representation back to a word with letters. The chr() function converts ASCII code values 
to letters, and we use a list comprehension to do this repeatedly. 


If we would like a slightly more recognizable result, we can combine the letters into a string. 


Bob is pleased to obtain such an informative message from Alice. What would have happened if an imposter had sent a message 
ostensibly from Alice, or what if an adversary had intercepted Alice's original message and replaced it with a tampered message? 
(The latter is known as a “man in the middle” attack.) 


In either case, the rogue party would not be able to duplicate Alice's first action — signing her message. If an adversary somehow 
signs the message, or tampers with it, the step where Bob unwraps the signing will lead to total garbage. (Try it!) Because Bob 
received a legitimate word, properly capitalized, he has confidence that the message he unsigned is the same as the message Alice 
signed. In practice, if Alice sent several hundred words as her message, the odds that it will unsign as cohrent text are 
astronomically small. 


What have we demonstrated? 


1. Alice can send messages that only Bob can read. 
2. Bob can receive secret messages from anybody. 
3. Alice can sign messages, so that then Bob (or anybody else)knows they are genuinely from Alice. 


Of course, without making new keys, you can reverse the roles of Alice and Bob. And if Carol makes a key pair, she can 
communicate with both Alice and Bob in the same fashion. 


If you want to use RSA public-key encryption seriously, investigate the open source software GNU Privacy Guard, aka GPG , 
which is freely available at www.gnupg.org/. Notice that it only makes sense to use encryption programs that allow you to look at 
the source code. 


This page titled 7.7: Sage is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or curated by Thomas 
W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the LibreTexts platform; a 
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7.8: Sage Exercises 


Construct a keypair for Alice using the first two primes greater than 10!*. For your choice of E, use a single prime number 
and use the smallest possible choice. 


Output the values of n, &, and D for Alice. Then use Sage commands to verify that Alice's encryption and decryption keys are 
multiplicative inverses. 


Construct a keypair for Bob using the first two primes greater than 2- 1012. For your choice of EF, use a single prime number 
and use the smallest possible choice. Output the values of n, E, and D for Alice. 


Encode the word Math using ASCII values in the same manner as described in this section (keep the capitalization as 
shown). Create a signed message of this word for communication from Alice to Bob. Output the three integers: the message, 
the signed message and the signed, encrypted message. 


Demonstrate how Bob converts the message received from Alice back into the word Math . Output the value of the 
intermediate computations and the final human-readable message. 


Create a new signed message from Alice to Bob. Simulate the message being tampered with by adding 1 to the integer Bob 
receives, before he decrypts it. What result does Bob get for the letters of the message when he decrypts and unsigns the 
tampered message? 


Organize a class into several small groups. Have each group construct key pairs with some minimum size (digits in n). Each 
group should keep their private key to themselves, but make their public key available to everybody in the room. It could be 
written on the board (error-prone) or maybe pasted in a public site like pastebin.com . Then each group can send a 
signed message to another group, where the groups could be arranged logically in a circular fashion for this purpose. Of 
course, messages should be posted publicly as well. Expect a success rate somewhere between 50% and 100%. 


If you do not do this in class, grab a study buddy and send each other messages in the same manner. Expect a success rate of 
0%, 50% or 100%. 


This page titled 7.8: Sage Exercises is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or curated by 
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platform; a detailed edit history is available upon request. 
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CHAPTER OVERVIEW 


8: Algebraic Coding Theory 


Coding theory is an application of algebra that has become increasingly important over the last several decades. When we transmit 
data, we are concerned about sending a message over a channel that could be affected by “noise.” We wish to be able to encode and 
decode the information in a manner that will allow the detection, and possibly the correction, of errors caused by noise. This 
situation arises in many areas of communications, including radio, telephone, television, computer communications, and digital 
media technology. Probability, combinatorics, group theory, linear algebra, and polynomial rings over finite fields all play 
important roles in coding theory. 

8.1: Sage Exercises 

8.2: Error-Detecting and Correcting Codes 

8.3: Linear Codes 

8.4: Parity-Check and Generator Matrices 

8.5: Efficient Decoding 

8.6: Reading Questions 

8.7: Exercises 

8.8: Programming Exercises 

8.9: References and Suggested Readings 

8.10: Sage 
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8.1: Sage Exercises 


Create the (binary) Golay code with the codes.GolayCode() constructor. Read the documentation to be sure you build 
the binary version (not ternary), and do not build the extended version (which is the default). 


1. Use Sage methods to compute the length, dimension and minimum distance of the code. 

2. How many errors can this code detect? How many can it correct? 

3. Find a nonzero codeword and introduce three errors by adding a vector with three 1's (your choice) to create a received 
message. Show that the message is decoded properly. 

4. Recycle your choices from the previous part, but now add one more error. Does the new received message get decoded 
properly? 


One technique for improving the characteristics of a code is to add an overall parity-check bit, much like the lone parity-check 
bit of the ASCII code described in Example 8.3. Such codes are referred to as the extended version of the original. 


1. Construct the (binary) Golay code and obtain the parity-check matrix. Use Sage commands to enlarge this matrix to create a 
new parity check matrix that has an additional overall parity-check bit. You may find the matrix methods .augment( ) 
and .stack() useful, as well as the constructors zero _vector() and ones_matrix() (remembering that 
we specify the binary entries as being from the field GF(2) .) 


Create the extended code by supplying your enlarged parity-check matrix to the 
codes. from_parity check _matrix() constructor and compute the length, dimension and minimum distance 
of the extended code. 


2. How are the properties of this new code better? At what cost? 

3. Now create the extended (binary) Golay code with the Sage constructor codes.GolayCode() and the correct 
keyword to obtain the extended version. With luck, the sorted lists of your codewords and Sage's codewords will be equal. 
If not, the linear code method .is_ permutation _equivalent() shouldreturn True to indicate that your code 
and Sage's are just rearrangements of each other. 


Note: This problem is on holiday (as of Sage 6.7), while some buggy Sage code for the minimum distance of a Hamming code 
gets sorted out. The + = 2 case produces an error message and for + > 5 the computation of the minimum distance has 
become intolerably slow. So it is a bit harder to make a reasonable conjecture from just 3 cases. 


The dual of an (n, k) block code is formed as all the set of all binary vectors which are orthogonal to every vector of the 
original code. Exercise 8.6.25 describes this construction and asks about some of its properties. 


You can construct the dual of a code in Sage with the .dual_code() method. Construct the binary Hamming codes, and 
their duals, with the parameter + ranging from 2 to 5 , inclusive. Build a table with six columns (perhaps employing the 

html.table() function) that lists r, the length of the codes, the dimensions of the original and the dual, and the 
minimum distances of the orginal and the dual. 


Conjecture formulas for the dimension and minimum distance of the dual of the Hamming code as expressions in the 
parameter r. 


A code with minimum distance d is called perfect if every possible vector is within Hamming distance (d—1)/2 of some 
codeword. If we expand our notion of geometry to account for the Hamming distance as the metric, then we can speak of a 
sphere of radius r around a vector (or codeword. For a code of length n, such a sphere will contain 
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vectors within in it. For a perfect code, the spheres of radius d centered at the codewords of the code will exactly partition the 


entire set of all possible vectors. (This is the connection that means that coding theory meshes with sphere packing problems.) 


A consequence of a code of dimension & being perfect is that 


()-0)-Ge(S))-" 


Conversely, if a code has minimum distance d and the condition above is true, then the code is perfect. 


Write a Python function, named is _perfect() which accepts a linear code as input and returns True or False. 
Demonstrate your function by checking that the (binary) Golay code is perfect, and then use a loop to verify that the (binary) 
Hamming codes are perfect for all lengths below 32. 


This page titled 8.1: Sage Exercises is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or curated by 
Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the LibreTexts 
platform; a detailed edit history is available upon request. 
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8.2: Error-Detecting and Correcting Codes 


Let us examine a simple model of a communications system for transmitting and receiving coded messages (Figure 8.1). 


m-digit message 


n-digit code word 


tes 


Noise 


Receiver 


n-digit received word 


m-digit received message or error 


Figure 8.1. Encoding and decoding messages 


Uncoded messages may be composed of letters or characters, but typically they consist of binary m-tuples. These messages are 
encoded into codewords, consisting of binary n-tuples, by a device called an encoder. The message is transmitted and then 
decoded. We will consider the occurrence of errors during transmission. An error occurs if there is a change in one or more bits in 
the codeword. A decoding scheme is a method that either converts an arbitrarily received n-tuple into a meaningful decoded 
message or gives an error message for that n-tuple. If the received message is a codeword (one of the special n-tuples allowed to 
be transmitted), then the decoded message must be the unique message that was encoded into the codeword. For received non- 
codewords, the decoding scheme will give an error indication, or, if we are more clever, will actually try to correct the error and 
reconstruct the original message. Our goal is to transmit error-free messages as cheaply and quickly as possible. 


vY Example 8.2 


One possible coding scheme would be to send a message several times and to compare the received copies with one another. 
Suppose that the message to be encoded is a binary n-tuple (21, 2,..., Zn). The message is encoded into a binary 3n-tuple 
by simply repeating the message three times: 


(GAigtin gon tea) ISH (ig tb hpannqtingtaleeiana qingtalgtb aoe qtan)e 


Solution 
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To decode the message, we choose as the zth digit the one that appears in the zth place in at least two of the three transmissions. 
For example, if the original message is (0110), then the transmitted message will be (0110 0110 0110). If there is a 
transmission error in the fifth digit, then the received codeword will be (0110 1110 0110) which will be correctly decoded as 
(0110).° This triple-repetition method will automatically detect and correct all single errors, but it is slow and inefficient: to 
send a message consisting of n bits, 2n extra bits are required, and we can only detect and correct single errors. We will see 
that it is possible to find an encoding scheme that will encode a message of n bits into m bits with m much smaller than 3n. 


vY Example 8.3 


Even parity, a commonly used coding scheme, is much more efficient than the simple repetition scheme. The ASCII 
(American Standard Code for Information Interchange) coding system uses binary 8-tuples, yielding 2° = 256 possible 8- 
tuples. However, only seven bits are needed since there are only 2’ = 128 ASCII characters. What can or should be done with 
the extra bit? 


Solution 


Using the full eight bits, we can detect single transmission errors. For example, the ASCII codes for A, B, and C are 


A = 6519 =0100000h, 
B = 661) = 01000010, 
C =6719 =0100001h. 


Notice that the leftmost bit is always set to 0; that is, the 128 ASCII characters have codes 


00000000, = 010, 


01111114, = 127%. 


The bit can be used for error checking on the other seven bits. It is set to either 0 or 1 so that the total number of 1 bits in the 
representation of a character is even. Using even parity, the codes for A, B, and C now become 


A =01000001, 
B = 01000010, 
C =1100001h. 


Suppose an A is sent and a transmission error in the sixth bit is caused by noise over the communication channel so that 
(0100 0101)is received. We know an error has occurred since the received word has an odd number of 1s, and we can now 
request that the codeword be transmitted again. When used for error checking, the leftmost bit is called a parity check bit. 


By far the most common error-detecting codes used in computers are based on the addition of a parity bit. Typically, a 
computer stores information in m-tuples called words. Common word lengths are 8, 16, and 32 bits. One bit in the word is set 
aside as the parity check bit, and is not used to store information. This bit is set to either 0 or 1, depending on the number of 1s 
in the word. 


Adding a parity check bit allows the detection of all single errors because changing a single bit either increases or decreases the 
number of 1s by one, and in either case the parity has been changed from even to odd, so the new word is not a codeword. (We 
could also construct an error detection scheme based on odd parity; that is, we could set the parity check bit so that a codeword 
always has an odd number of 1s.) 


The even parity system is easy to implement, but has two drawbacks. First, multiple errors are not detectable. Suppose an A is sent 
and the first and seventh bits are changed from 0 to 1. The received word is a codeword, but will be decoded into a C instead of an 
A. Second, we do not have the ability to correct errors. If the 8-tuple (1001 1000)is received, we know that an error has occurred, 
but we have no idea which bit has been changed. We will now investigate a coding scheme that will not only allow us to detect 
transmission errors but will actually correct the errors. 
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vY Example 8.4 


Suppose that our original message is either a 0 or a 1, and that 0 encodes to (000) and 1 encodes to (111). 
Solution 


If only a single error occurs during transmission, we can detect and correct the error. For example, if a (101) is received, then 
the second bit must have been changed from a 1 to a 0. The originally transmitted codeword must have been (111). This 
method will detect and correct all single errors. 


\(Table \text { } 8.5\). A repetition code 


Transmitted Received Word 


Codeword 000 001 010 011 100 101 110 111 
000 0 1 1 2 1 2 2 3 
111 3 2 2 1 2 1 1 0 


In Table 8.5, we present all possible words that might be received for the transmitted codewords (000) and (111). Table 8.5 
also shows the number of bits by which each received 3-tuple differs from each original codeword. 


Maximum-Likelihood Decoding 


The coding scheme presented in Example 8.4 is not a complete solution to the problem because it does not account for the 
possibility of multiple errors. For example, either a (000) or a (111) could be sent and a (001) received. We have no means of 
deciding from the received word whether there was a single error in the third bit or two errors, one in the first bit and one in the 
second. No matter what coding scheme is used, an incorrect message could be received. We could transmit a (000), have errors in 
all three bits, and receive the codeword (111). It is important to make explicit assumptions about the likelihood and distribution of 
transmission errors so that, in a particular application, it will be known whether a given error detection scheme is appropriate. We 
will assume that transmission errors are rare, and, that when they do occur, they occur independently in each bit; that is, if p is the 
probability of an error in one bit and q is the probability of an error in a different bit, then the probability of errors occurring in both 
of these bits at the same time is pq. We will also assume that a received n-tuple is decoded into a codeword that is closest to it; that 
is, we assume that the receiver uses maximum-likelihood decoding. 4 


This section requires a knowledge of probability, but can be skipped without loss of continuity. 


Q —————————> 0 


Figure 8.6. Binary symmetric channel 


A binary symmetric channel is a model that consists of a transmitter capable of sending a binary signal, either a 0 or a 1, together 
with a receiver. Let p be the probability that the signal is correctly received. Then g=1-—p is the probability of an incorrect 
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reception. If a 1 is sent, then the probability that a 1 is received is p and the probability that a 0 is received is q (Figure 8.6). The 
probability that no errors occur during the transmission of a binary codeword of length n is p”. For example, if p =0.999 and a 
message consisting of 10,000 bits is sent, then the probability of a perfect transmission is 


(0.999)1°" ~ 0.00005. 


& Theorem 8.7 


If a binary n-tuple (x1, ..., 2p) is transmitted across a binary symmetric channel with probability p that no error will occur in 
each coordinate, then the probability that there are errors in exactly k coordinates is 


nN\ k n-k 
(j) ato" 


Fix k different coordinates. We first compute the probability that an error has occurred in this fixed set of coordinates. The 
probability of an error occurring in a particular one of these k coordinates is q; the probability that an error will not occur in 


Proof 


any of the remaining n — k coordinates is p. The probability of each of these n independent events is g*p"—*. The number 
of possible error patterns with exactly & errors occurring is equal to 


Gear 


the number of combinations of n things taken k at a time. Each of these error patterns has probability q*p"—* of occurring; 
hence, the probability of all of these error patterns is 


vY Example 8.8 


Suppose that p = 0.995 and a 500-bit message is sent. 
Solution 
The probability that the message was sent error-free is 
p” = (0.995)°°" = 0.082. 


The probability of exactly one error occurring is 


q) gp”? =500(0.005)(0.995)4% ~ 0.204. 


The probability of exactly two errors is 


500 - 499 
(5) = —z (0.005)? (0.995)'* ~ 0.257. 


The probability of more than two errors is approximately 


1 —0.082 —0.204 —0.257 =0.457. 


Block Codes 


If we are to develop efficient error-detecting and error-correcting codes, we will need more sophisticated mathematical tools. 
Group theory will allow faster methods of encoding and decoding messages. A code is an (n, m)-block code if the information that 
is to be coded can be divided into blocks of m binary digits, each of which can be encoded into n binary digits. More specifically, 
an (n, m)-block code consists of an encoding function 
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and a decoding function 


E:2? +723 


D:Z3 +2”. 


A codeword is any element in the image of &. We also require that E be one-to-one so that two information blocks will not be 
encoded into the same codeword. If our code is to be error-correcting, then D must be onto. 


vY Example 8.9 


The even-parity coding system developed to detect single errors in ASCII characters is an (8, 7)-block code. 

Solution 

The encoding function is 

E(a7, L6,-+> 21) = (xg, oh ee 21), 

where zg = @%7+2%6+---+21 with addition in Z2. 
Let x = (a1,...,2%n) and y = (y1,.--, Yn) be binary n-tuples. The Hamming distance or distance, d(x, y), between x and y is 
the number of bits in which x and y differ. The distance between two codewords is the minimum number of transmission errors 
required to change one codeword into the other. The minimum distance for a code, dyin, is the minimum of all distances d(x, y), 


where x and y are distinct codewords. The weight, w(x), of a binary codeword x is the number of Is in x. Clearly, 
w(x) = d(x, 0), where 0 = (00---0). 


wv Example 8.10 


Let x = (10101), y = (11010), and z = (00011) be all of the codewords in some code C. 
Solution 
Then we have the following Hamming distances: 
d(x,y) =4, d(x, z) =8, d(y,z) =3. 
The minimum distance for this code is 3. We also have the following weights: 
w(x) = 3, w(y) = 3, w(z) =2. 


The following proposition lists some basic properties about the weight of a codeword and the distance between two codewords. 
The proof is left as an exercise. 


& Proposition 8.11 


Let x, y, and z be binary n-tuples. Then 
1. w(x) = d(x, 0); 


2. d(x, y) > 0; 

3. d(x, y) =0 exactly when x = y; 

4. d(x, y) = d(y, x); 

5. d(x, y) < d(x, z) +d(z, y). 

\(Table \text { } 8.12.\) Distances between 4-bit codewords 
0000 0011 0101 0110 1001 1010 1100 1111 

0000 0 2 2 2 2 2 2 4 
0011 2 0 2 2 2 ? 4 2 
0101 2 2 0 2 2 4 2 2 
0110 2 2 2 0 4 2 2 2 
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1001 2 2 2 4 0 2 2 2 
1010 2 2 4 2 2 0 2 2 
1100 2 4 2 2 2 2 0 2 
1111 4 2 2 2 2 2 2 0 


The weights in a particular code are usually much easier to compute than the Hamming distances between all codewords in the 
code. If a code is set up carefully, we can use this fact to our advantage. 


Suppose that x = (1101) and y = (1100) are codewords in some code. If we transmit (1101) and an error occurs in the rightmost 
bit, then (1100) will be received. Since (1100) is a codeword, the decoder will decode (1100) as the transmitted message. This 
code is clearly not very appropriate for error detection. The problem is that d(x,y) =1. If x =(1100) and y=(1010) are 
codewords, then d(x, y) = 2. If x is transmitted and a single error occurs, then y can never be received. Table 8.12 gives the 
distances between all 4-bit codewords in which the first three bits carry information and the fourth is an even parity check bit. We 
can see that the minimum distance here is 2; hence, the code is suitable as a single error-detecting code. 


To determine exactly what the error-detecting and error-correcting capabilities for a code are, we need to analyze the minimum 
distance for the code. Let x and y be codewords. If d(x, y) =1 and an error occurs where x and y differ, then x is changed to y. 
The received codeword is y and no error message is given. Now suppose d(x, y) = 2. Then a single error cannot change x to y. 
Therefore, if dmin =2, we have the ability to detect single errors. However, suppose that d(x, y)=2, y is sent, and a 
noncodeword z is received such that 


d(x, z) =d(y,z) =1. 


Then the decoder cannot decide between x and y. Even though we are aware that an error has occurred, we do not know what the 
error is. 


Suppose dmin > 3. Then the maximum-likelihood decoding scheme corrects all single errors. Starting with a codeword x, an error 


in the transmission of a single bit gives y with d(x, y) =1, but d(z, y) > 2 for any other codeword z # x. If we do not require 
the correction of errors, then we can detect multiple errors when a code has a minimum distance that is greater than or equal to 3. 


& Theorem 8.13 


Let C be a code with dmin = 2n+1. Then C can correct any n or fewer errors. Furthermore, any 2n or fewer errors can be 
detected in C’. 
Proof 


Suppose that a codeword x is sent and the word y is received with at most n errors. Then d(x,y) <n. If z is any 
codeword other than x, then 


2n+1 <d(x,z) <d(x,y)+d(y,z) <n+dly,z). 


Hence, d(y,z) >n-+1 andy will be correctly decoded as x. Now suppose that x is transmitted and y is received and 
that at least one error has occurred, but not more than 2n errors. Then 1 < d(x, y) < 2n. Since the minimum distance 
between codewords is 2n +1, y cannot be a codeword. Consequently, the code can detect between 1 and 27 errors. 


Example 8.2.1 


In Table 8.15, the codewords c; = (00000), cz = (00111), cz = (11100), and c, = (11011) determine a single error- 
correcting code. 


Solution 
\(Table \text { } 8.15.\) Hamming distances for an error-correcting code 
00000 00111 11100 11011 
00000 0 3 3 4 
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00111 3 0 4 3 
11100 3 4 0 3 
11011 4 3 3 0 


Historical Note 


Modern coding theory began in 1948 with C. Shannon's paper, “A Mathematical Theory of Information” [7]. This paper offered an 
example of an algebraic code, and Shannon's Theorem proclaimed exactly how good codes could be expected to be. Richard 
Hamming began working with linear codes at Bell Labs in the late 1940s and early 1950s after becoming frustrated because the 
programs that he was running could not recover from simple errors generated by noise. Coding theory has grown tremendously in 
the past several decades. The Theory of Error-Correcting Codes, by MacWilliams and Sloane [5], published in 1977, already 
contained over 1500 references. Linear codes (Reed-Muller (32, 6)-block codes) were used on NASA's Mariner space probes. 
More recent space probes such as Voyager have used what are called convolution codes. Currently, very active research is being 
done with Goppa codes, which are heavily dependent on algebraic geometry. 


This page titled 8.2: Error-Detecting and Correcting Codes is shared under a GNU Free Documentation License 1.3 license and was authored, 
remixed, and/or curated by Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and 
standards of the LibreTexts platform; a detailed edit history is available upon request. 
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8.3: Linear Codes 


To gain more knowledge of a particular code and develop more efficient techniques of encoding, decoding, and error detection, we 
need to add additional structure to our codes. One way to accomplish this is to require that the code also be a group. A group code 
is a code that is also a subgroup of Z5. 


To check that a code is a group code, we need only verify one thing. If we add any two elements in the code, the result must be an 
n-tuple that is again in the code. It is not necessary to check that the inverse of the n-tuple is in the code, since every codeword is 
its own inverse, nor is it necessary to check that 0 is a codeword. For instance, 


(11000101) + (11000101) = (00000000). 


wv Example 8.16 


Suppose that we have a code that consists of the following 7-tuples: 


(0000000) (0001111) (0010101) (0011010) 
(0100110) (0101001) (0110011) (0111100) 
(1000011) (1001100) (1010110) (1011001) 
(1100101) (1101010) (1110000) (1111111). 


Solution 


It is a straightforward though tedious task to verify that this code is also a subgroup of a and, therefore, a group code. This 
code is a single error-detecting and single error-correcting code, but it is a long and tedious process to compute all of the 
distances between pairs of codewords to determine that dyin = 3. It is much easier to see that the minimum weight of all the 
nonzero codewords is 3. As we will soon see, this is no coincidence. However, the relationship between weights and distances 
in a particular code is heavily dependent on the fact that the code is a group. 


& Lemma 8.17 


Let x and y be binary n-tuples. Then w(x +y) = d(x, y). 


Proof 


Suppose that x and y are binary n-tuples. Then the distance between x and y is exactly the number of places in which x 
and y differ. But x and y differ in a particular coordinate exactly when the sum in the coordinate is 1, since 


14+1=0 
0+0=0 
LEO =1 
0+1=1. 


Consequently, the weight of the sum must be the distance between the two codewords. 


& Theorem 8.18 


Let dyin be the minimum distance for a group code C’. Then dyin is the minimum weight of all the nonzero codewords in C. 
That is, 


dmin = min{w(x) : x £0}. 


Proof 
Observe that 
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dmin = min{d(x,y):x#y} 
=min{d(x,y):x+y 40} 
=min{w(x+y):x+y 40} 
=min{w(z):z 0}. 


Linear Codes 


From Example 8.16, it is now easy to check that the minimum nonzero weight is 3; hence, the code does indeed detect and correct 
all single errors. We have now reduced the problem of finding “good” codes to that of generating group codes. One easy way to 
generate group codes is to employ a bit of matrix theory. 


Define the inner product of two binary n-tuples to be 


XY H$=@™MY1 +++ +IFnYn, 


\transpose 5 


where x =(21,%,.-.,Z%n) and y=(y1,Y2;---;Yn) 77? =~ are column _ vectors. For example, if 
x = (011001) \*#™5P°s° and y = (1 10101) then x-y =0. We can also look at an inner product as the product of a row 
matrix with a column matrix; that is, 


x-y= x \transpose,, 


Yn 
= £1Y1 +L2Yy2 +++ +2nYn- 


Since we will be working with matrices, we will write binary n-tuples as column vectors for the remainder of this chapter. 


vY Example 8.19 


Suppose that the words to be encoded consist of all binary 3-tuples and that our encoding scheme is even-parity. 
Solution 


To encode an arbitrary 3-tuple, we add a fourth bit to obtain an even number of 1s. Notice that an arbitrary n-tuple 
X = (x1, @o,... Bq) TAP has an even number of 1s exactly when 21+2%2+---+2,=0; hence, a 4-tuple 


\transpose 


X = (£1, £2, 23, £4) has an even number of 1s if 1 +22 +23+24=0, or 


x-1= x \ttansposeq = (21 Zo 23 24 ) 


a 
ll 
(= 


This example leads us to hope that there is a connection between matrices and coding theory. 


Let Minxn (Zz) denote the set of all m xn matrices with entries in Z.. We do matrix operations as usual except that all our 
addition and multiplication operations occur in Z2. Define the null space of a matrix H € Mm xn (Zz) to be the set of all binary n- 
tuples x such that Hx = 0. We denote the null space of a matrix H by \Null(#). 


vY Example 8.20 


Suppose that 


0 
H=]1 
0 


Corr 
a) 
a 
1S) 1S) 
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For a 5-tuple x = (21, 22, £3, £4, oe to be in the null space of H, Hx =0. Equivalently, the following system of 
equations must be satisfied: 


+24 =0 
@+%2+23+24 =0 
tg3t+a,+a5 =0. 


Solution 
The set of binary 5-tuples satisfying these equations is 
(00000) (11110) (10101) (01011). 


This code is easily determined to be a group code. 


& Theorem 8.21 


Let H be in Mmxn (Za). Then the null space of H is a group code. 


Proof 


Since each element of Z5 is its own inverse, the only thing that really needs to be checked here is closure. Let 
x, y € \Null(H) for some matrix H in Mxn (Zz). Then Hx = 0 and Hy = 0. So 


H(x+y) = Hx+Hy =0+0=0. 


Hence, x+y is in the null space of H and therefore must be a codeword. 


A code is a linear code if it is determined by the null space of some matrix H € Minyxn (Ze). 


vY Example 8.22 


Let C' be the code given by the matrix 


Solution 


Suppose that the 6-tuple x = (Q10011) Verse is received. It is a simple matter of matrix multiplication to determine whether 
or not x is a codeword. Since 


Ax) 15 
1 


the received word is not a codeword. We must either attempt to correct the word or request that it be transmitted again. 


This page titled 8.3: Linear Codes is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or curated by 
Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the LibreTexts 
platform; a detailed edit history is available upon request. 
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8.4: Parity-Check and Generator Matrices 


We need to find a systematic way of generating linear codes as well as fast methods of decoding. By examining the properties of a 
matrix H and by carefully choosing H, it is possible to develop very efficient methods of encoding and decoding messages. To this 
end, we will introduce standard generator and canonical parity-check matrices. 


Suppose that H is an m <n matrix with entries in Zz and n > m. If the last m columns of the matrix form the m x m identity 
matrix, I;,, then the matrix is a canonical parity-check matrix. More specifically, H =(A| Im), where A is the m x (n—m) 


matrix 
11 412 ***) G1 n—m 
Q@21 422, * "+ A2.n—m 
Am1 Am2 sts Aam,n—m 
and I, is the m x m identity matrix 
1 0 
0 
0 0 1 


With each canonical parity-check matrix we can associate an n x (n —m) standard generator matrix 


o- (9). 


Our goal will be to show that an x satisfying Gx =y exists if and only if Hy = 0. Given a message block x to be encoded, the 
matrix G will allow us to quickly encode it into a linear codeword y. 


vY Example 8.23 


Suppose that we have the following eight words to be encoded: 
(000), (001), (010),..., (111). 


For 


the associated standard generator and canonical parity-check matrices are 


0 


eS oy oy op 
COorrFOoOrF 
FP OFF CO Oo 


and 


respectively. 
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Solution 


Observe that the rows in H represent the parity checks on certain bit positions in a 6-tuple. The 1s in the identity matrix serve 
as parity checks for the 1s in the same row. If x = (#1, X2, £3, 24, Z5, 2), then 


%2+%3+24 
O=Ax=| 214+22+245 |, 
21 +2734 2%6 
which yields a system of equations: 
t2+23+24 =0 


t+a%2+25 =0 
t1,+23+25 =0. 


Here x4 serves as a check bit for x2 and x3; x5 is a check bit for x; and x; and 2¢ is a check bit for x; and x3. The identity 
matrix keeps x4, £5, and xg from having to check on each other. Hence, x1, £2, and x3 can be arbitrary but x4, 25, and x6 
must be chosen to ensure parity. The null space of H is easily computed to be 


(000000) (001101) (010110) (011011) 
(100011) (101110) (110101) (111000). 


An even easier way to compute the null space is with the generator matrix G (Table 8.24). 


\(Table \text { } 8.24\). A matrix-generated code 


Message Word x Codeword Gx 
000 000000 
001 001101 
010 010110 
011 011011 
100 100011 
101 101110 
110 110101 
111 111000 


& Theorem 8.25 


If H © Mmxn(Z2) is a canonical parity-check matrix, then \Null(H) consists of all x € Z} whose first n —m bits are 
arbitrary but whose last m bits are determined by Hx = 0. Each of the last m bits serves as an even parity check bit for some 
of the first n —m bits. Hence, H gives rise to an (n,n —m) -block code. 


We leave the proof of this theorem as an exercise. In light of the theorem, the first n —m bits in x are called information bits and 
the last m bits are called check bits. In Example 8.23, the first three bits are the information bits and the last three are the check 
bits. 


& Theorem 8.26 


Suppose that G is ann x k standard generator matrix. Then C = {y : Gx =y forx € Zs} is an (n, k)-block code. More 
specifically, C' is a group code. 


Proof 


Let Gx; = y, and Gx, = y, be two codewords. Then y, + y, isin C since 


GNU Free Documentation License https ://math.libretexts.org/@go/page/81086 


Oibretexts: 


We must also show that two message blocks cannot be encoded into the same codeword. That is, we must show that if 
Gx = Gy, thenx =y. Suppose that Gx = Gy. Then 


Gx — Gy = G(x-—y) =0. 


G(x1 +X2) = Gx1 + Gx2 =y), +yp. 


However, the first & coordinates in G(x—y) are exactly z] —y1,..., 2 — yx, since they are determined by the identity 
matrix, I;,, part of G. Hence, G(x—y) =O exactly whenx = y. 


Before we can prove the relationship between canonical parity-check matrices and standard generating matrices, we need to prove 
a lemma. 


& Lemma 8.27 


In—m 
A 


Let H =(A|I,) be anm xn canonical parity-check matrix and G = ( ) be the corresponding n x (n—m)_ standard 


generator matrix. Then HG = 0. 


Proof 


Let C = HG. The jth entry in C is 


n 

Cij = ) hik gkj 
= 
n—-mMm 


n 
= hik 9kj + y hik Gkj 
k= k=n—m+1 


= Se Aik Ok; aie ye 07 (an) kok; 
k=1 k=n-—m-41 
= aij ap ain 
=0, 
where 
1 — 
6; 
: { 0 ifj 
is the Kronecker delta. 


& Theorem 8.28 


Tn—m 


A 
matrix associated with H. Let C be the code generated by G. Then y is in C if and only if Hy =0. In particular, C is a 
linear code with canonical parity-check matrix H. 


Let H =(A| I) be anm xn canonical parity-check matrix and let G = ( ) be the n x (n—m.) standard generator 


Proof 
First suppose that y € C. Then Gx = y for some x € Z;’. By Lemma 8.27, Hy = HGx =0. 
Conversely, suppose that y = (y1,--., Ym) ""*™?°S° is in the null space of H. We need to find an x in Z}~™ such that 


Gx\ttanspose — y, Since Hy = 0, the following set of equations must be satisfied: 


Q1141 + Q1242 +--+ G1 n—mYn—m + Yn—mt1 =0 
Q21Y1 + A22Y2 +++*+42n—-mYn—m +Yn—-mi2 =0 


Am1Y1 + Am2Y2 1° + anjn—mYn—m +Yn-mim = 0. 
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Equivalently, yn—-m+i,--- Yn are determined by y1,...,Yn—m: 


Yn—m41 = 411Y1 + Q12Y2 +++ + +41.n—mYn—m 
Yn—m+2 = 4211 + Ag2Y2 +++ +@2.n—-mYn—m 


Yn =4m1Y1 + Am2Y2 areas + @m,n—mYn—m- 


Consequently, we can let x; =y; for? =1,...,n—m. 


It would be helpful if we could compute the minimum distance of a linear code directly from its matrix H in order to determine the 
error-detecting and error-correcting capabilities of the code. Suppose that 


e, = (100 cae QQ) temaroes 
e, = (010 aha QO) Meemsrcss 


e, = (000 fue 1) enaroes 


are the n-tuples in Z> of weight 1. For an m x n binary matrix H, He; is exactly the ith column of the matrix H. 


vY Example 8.29 


Observe that 


it ail 
1 0 0 
1 1 0 


Se) 
(= S) 
(jo) to) Ney se) 
ll 
FOr 


We state this result in the following proposition and leave the proof as an exercise. 


& Proposition 8.30 


Let e; be the binary n-tuple with a 1 in the ith coordinate and 0's elsewhere and suppose that H € Mmxn(Z2). Then He; is 
the ith column of the matrix \(H\text{.}\ 


& Theorem 8.31 


Let H be anm Xn binary matrix. Then the null space of H is a single error-detecting code if and only if no column of 
consists entirely of zeros. 


Proof 


Suppose that \Null(#) is a single error-detecting code. Then the minimum distance of the code must be at least 2. Since 
the null space is a group code, it is sufficient to require that the code contain no codewords of less than weight 2 other than 
the zero codeword. That is, e; must not be a codeword fori =1,...,n. Since He; is the ith column of H, the only way in 
which e; could be in the null space of H would be if the 7th column were all zeros, which is impossible; hence, the code 
must have the capability to detect at least single errors. 


Conversely, suppose that no column of H is the zero column. By Proposition 8.30 He; 4 0. 
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vY Example 8.32 


If we consider the matrices 


111 0 
A,={|1 0 0 0 
110041 
and 
1110 0 
A,=|1 0 0 0 OO], 
i al al 
Solution 


then the null space of Hj is a single error-detecting code and the null space of Hz is not. 


We can even do better than Theorem 8.31. This theorem gives us conditions on a matrix H that tell us when the minimum weight 
of the code formed by the null space of H is 2. We can also determine when the minimum distance of a linear code is 3 by 


examining the corresponding matrix. 


vY Example 8.33 


If we let 
1110 
H={1 001 
1 10 0 
and want to determine whether or not H is the canonical parity-check matrix for an error-correcting code, 


Solution 

it is necessary to make certain that \Null(H) does not contain any 4-tuples of weight 2. That is, (1100), (1010), (1001), 
(0110), (0101), and (0011) must not be in \Null(H). The next theorem states that we can indeed determine that the code 
generated by # is error-correcting by examining the columns of H. Notice in this example that not only does H have no zero 
columns, but also that no two columns are the same. 


& Theorem 8.34 


Let H be a binary matrix. The null space of H is a single error-correcting code if and only if H does not contain any zero 
columns and no two columns of H are identical. 


Proof 
The n-tuple e; +e; has 1s in the ith and jth entries and Os elsewhere, and w(e; +e;) =2 fori J. Since 
0 = H(e; +e;) = He; + He; 


can only occur if the 2th and jth columns are identical, the null space of # is a single error-correcting code. 


Suppose now that we have a canonical parity-check matrix H with three rows. Then we might ask how many more columns we 
can add to the matrix and still have a null space that is a single error-detecting and single error-correcting code. Since each column 
has three entries, there are 2? = 8 possible distinct columns. We cannot add the columns 


0 1 0 0 
o},fo],{1],]{o 
0 0 0 1 
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So we can add as many as four columns and still maintain a minimum distance of 3. 


In general, if H is an m xn canonical parity-check matrix, then there are n —m information positions in each codeword. Each 


column has m bits, so there are 2” possible distinct columns. It is necessary that the columns 0, e1,...,@m be excluded, leaving 
2™ — (1+ m) remaining columns for information if we are still to maintain the ability not only to detect but also to correct single 
errors. 


This page titled 8.4: Parity-Check and Generator Matrices is shared under a GNU Free Documentation License 1.3 license and was authored, 
remixed, and/or curated by Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and 
standards of the LibreTexts platform; a detailed edit history is available upon request. 
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8.5: Efficient Decoding 


We are now at the stage where we are able to generate linear codes that detect and correct errors fairly easily, but it is still a time- 
consuming process to decode a received n-tuple and determine which is the closest codeword, because the received n-tuple must 
be compared to each possible codeword to determine the proper decoding. This can be a serious impediment if the code is very 
large. 


YW Example 8.35 


Given the binary matrix 


ak al 0) 0) 
H={01 01 0 
10001 
and the 5-tuples x = (11011)! and y = (01011)', 
Solution 
we can compute 
0 1 
Hx=| 0 and Hy=| 0 
0 1 


Hence, x is a codeword and y is not, since x is in the null space and y is not. Notice that Hy is identical to the first column of 
H. In fact, this is where the error occurred. If we flip the first bit in y from 0 to 1, then we obtain x. 


If H is an m Xn matrix and x € Z, then we say that the syndrome of x is Hx. The following proposition allows the quick 
detection and correction of errors. 


& Proposition 8.36 


Let the m x n binary matrix H determine a linear code and let x be the received n-tuple. Write x asx =c+e, where c is 
the transmitted codeword and e is the transmission error. Then the syndrome Hx of the received codeword x is also the 
syndrome of the error e. 


Proof 


The proof follows from the fact that 
Hx=H(c+e)=Hc+He=0+He=He. 


This proposition tells us that the syndrome of a received word depends solely on the error and not on the transmitted codeword. 
The proof of the following theorem follows immediately from Proposition 8.36 and from the fact that He is the ith column of the 
matrix H. 


& Theorem 8.37 


Let H € Mmxn(Z2) and suppose that the linear code corresponding to H is single error-correcting. Let r be a received n- 
tuple that was transmitted with at most one error. If the syndrome of r is 0, then no error has occurred; otherwise, if the 
syndrome of r is equal to some column of H, say the ith column, then the error has occurred in the ith bit 


vY Example 8.38 


Consider the matrix 
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10411 0 0 
H=|0 110410 
LL TSO Oe 
and suppose that the 6-tuples x = (111110)', y = (111111)*, and z = (010111)' have been received. 
Solution 
Then 
1 1 1 
Ax=|1|,Hy=|1],Hz=1|0 
1 0 0 


Hence, x has an error in the third bit and z has an error in the fourth bit. The transmitted codewords for x and z must have 
been (110110) and (010011), respectively. The syndrome of y does not occur in any of the columns of the matrix H, so 
multiple errors must have occurred to produce y. 


Coset Decoding 


We can use group theory to obtain another way of decoding messages. A linear code C’ is a subgroup of Z>. Coset or standard 
decoding uses the cosets of C in Z} to implement maximum-likelihood decoding. Suppose that C’ is an (n,m)-linear code. A 
coset of C’ in Z3 is written in the form x+C’, where x € Z}. By Lagrange's Theorem (Theorem 6.10), there are 2”-™ distinct 
cosets of C in Zj. 


vY Example 8.39 


Let C be the (5, 3)-linear code given by the parity-check matrix 
0 1 
H=1{1 0 
1 1 


Solution 
The code consists of the codewords 
(00000) (01101) (10011) (11110). 


There are 2°-* = 2° cosets of C in Ze, each with order 2? = 4. These cosets are listed in Table 8.40. 


\(Table \text { } 8.40.\) Cosets of C 


Coset Coset 

Representative 

Cc (00000)(01101)(10011)(11110) 
(10000) +C (10000)(11101)(00011)(01110) 
(01000) +C (01000)(00101)(11011)(10110) 
(00100) +C (00100)(01001)(10111)(11010) 
(00010) +C (00010)(01111)(10001)(11100) 
(00001) +C (00001)(01100)(10010)(11111) 
(10100) +C (00111)(01010)(10100)(11001) 
(00110) +C (00110)(01011)(10101)(11000) 


Our task is to find out how knowing the cosets might help us to decode a message. Suppose that x was the original codeword sent 
and that r is the n-tuple received. If e is the transmission error, then r=e-+x or, equivalently, x =e+r. However, this is 
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exactly the statement that r is an element in the coset e+ C’. In maximum-likelihood decoding we expect the error e to be as small 
as possible; that is, e will have the least weight. An n-tuple of least weight in a coset is called a coset leader. Once we have 
determined a coset leader for each coset, the decoding process becomes a task of calculating r+ e to obtain x. 


vY Example 8.41 


In Table 8.40, notice that we have chosen a representative of the least possible weight for each coset. 
Solution 


These representatives are coset leaders. Now suppose that r = (01111) is the received word. To decode r, we find that it is in 
the coset (00010) + C; hence, the originally transmitted codeword must have been (01101) = (01111) + (00010). 


A potential problem with this method of decoding is that we might have to examine every coset for the received codeword. The 
following proposition gives a method of implementing coset decoding. It states that we can associate a syndrome with each coset; 
hence, we can make a table that designates a coset leader corresponding to each syndrome. Such a list is called a decoding table. 


\(Table \text { } 8.42\). Syndromes for each coset 


Syndrome Coset Leader 
(000) (00000) 
(001) (00001) 
(010) (00010) 
(011) (10000) 
(100) (00100) 
(101) (01000) 
(110) (00110) 
(111) (10100) 


& Proposition 8.43 


Let C be an (n, k)-linear code given by the matrix H and suppose that x and y are in Z5. Then x and y are in the same 
coset of C' if and only if Hx = Hy. That is, two n-tuples are in the same coset if and only if their syndromes are the same. 
Proof 


Two n-tuples x and y are in the same coset of C’ exactly when x—y€C; however, this is equivalent to 
H(x—y)=0 or Hx=Hy. 


& Example 8.44 


Table 8.42 is a decoding table for the code C' given in Example 8.39. If x = (01111) is received, 
Solution 
then its syndrome can be computed to be 


0 
Ex ell 
0 


Examining the decoding table, we determine that the coset leader is (00010). It is now easy to decode the received 
codeword. 
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Given an (n, k)-block code, the question arises of whether or not coset decoding is a manageable scheme. A decoding table 


requires a list of cosets and syndromes, one for each of the 2" cosets of C. Suppose that we have a (32, 24}-block code. We 
have a huge number of codewords, 2”4, yet there are only 2°2-?4 — 28 — 256 cosets. 


This page titled 8.5: Efficient Decoding is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or 


curated by Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the 
LibreTexts platform; a detailed edit history is available upon request. 
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8.6: Reading Questions 


Suppose a binary code has minimum distance d = 6. How many errors can be detected? How many errors can be corrected? 


Explain why it is impossible for the 8-bit string with decimal value 569 to be an ASCII code for a character. Assume the 
leftmost bit of the string is being used as a parity-check bit. 


Suppose we receive the 8-bit string with decimal value 56;9 when we are expecting ASCII characters with a parity-check bit in 
the first bit (leftmost). We know an error has occurred in transmission. Give one of the probable guesses for the character 
which was actually sent (other than ‘8’), under the assumption that any individual bit is rarely sent in error. Explain the logic of 
your answer. (You may need to consult a table of ASCII values online.) 


Suppose a linear code C is created as the null space of the parity-check matrix 


0101 +0 
H=|1 1141 0 
001141 


Then z = 11100 is not a codeword. Describe a computation, and give the result of that computation, which verifies that x is 
not a codeword of the code C. 


For H and z@ as in the previous question, suppose that x is received as a message. Give a maximum likelihood decoding of the 
received message. 


This page titled 8.6: Reading Questions is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or 
curated by Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the 


LibreTexts platform; a detailed edit history is available upon request. 
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8.7: Exercises 


Why is the following encoding scheme not acceptable? 


Information 0 1 2 3 4 5 6 7 8 
Codeword 000 001 010 011 101 110 111 000 001 


Without doing any addition, explain why the following set of 4-tuples in Zs cannot be a group code. 


(0110) (1001) (1010) (1100) 


Compute the Hamming distances between the following pairs of n-tuples. 


1. (011010), (011100) 

2. (11110101), (01010100) 
3. (00110), (01111) 

4, (1001), (0111) 


Compute the weights of the following n-tuples. 
1. (011010) 
2. (11110101) 
3. (01111) 
4, (1011) 


Suppose that a linear code C' has a minimum weight of 7. What are the error-detection and error-correction capabilities of C? 


In each of the following codes, what is the minimum distance for the code? What is the best situation we might hope for in 
connection with error detection and error correction? 


1. (011010) (011100) (110111) (110000) 
011100) (011011) (111011) (100011) 


He ( 
(000000) (010101) (110100) (110011) 

3. (000000) (011100) (110101) (110001) 

4, (0110110) (0111100) (1110000) (1111111) 
(1001001) (1000011) (0001111) (0000000) 


Compute the null space of each of the following matrices. What type of (n, &)-block codes are the null spaces? Can you find a 
matrix (not necessarily a standard generator matrix) that generates each code? Are your generator matrices unique? 
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i as West ayant 
0.4 0 1 
10 011 6 
9 10 1 0 0 6 
110100 
010010 
11 0 0 OF 
3. 1 Oeecs dad 
1 WO 7 1 
4. 1.0 Oe te a 
(2 1 oo a 7 
Te at Gia 0a 
0110011 


Construct a (5, 2)-block code. Discuss both the error-detection and error-correction capabilities of your code. 


Let C be the code obtained from the null space of the matrix 


H= 


S— ae) 
jo) tS) (— 
a) 
(— i=) =) 
a 


Decode the message 
01111 10101 01110 00011 


if possible. 


Suppose that a 1000-bit binary message is transmitted. Assume that the probability of a single error is p and that the errors 
occurring in different bits are independent of one another. If p=0.01, what is the probability of more than one error 
occurring? What is the probability of exactly two errors occurring? Repeat this problem for p = 0.0001. 


Which matrices are canonical parity-check matrices? For those matrices that are canonical parity-check matrices, what are the 
corresponding standard generator matrices? What are the error-detection and error-correction capabilities of the code generated 
by each of these matrices? 


1. 1 10 0 0 
001 0 0 
000 1 0 
100 01 
2 01100 0 
1 101 0 0 
010041 0 
1100041 
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3. ‘igesbene bear 
ae. 
0 
1 
0 
1 


oro oO 
— ee) 
oreo hes! 
a) 


List all possible syndromes for the codes generated by each of the matrices in Exercise 8.6.11 


Let 


0o1i1i1éi1 
H={000101 
10101 
Compute the syndrome caused by each of the following transmission errors. 


1. An error in the first bit. 

2. An error in the third bit. 

3. An error in the last bit. 

4. Errors in the third and fourth bits. 


Let C be the group code in Z3 defined by the codewords (000) and (111). Compute the cosets of C’ in Z3. Why was there no 
need to specify right or left cosets? Give the single transmission error, if any, to which each coset corresponds. 


For each of the following matrices, find the cosets of the corresponding code C’. Give a decoding table for each code if 


possible. 
1. 0100 0 
1031041 
100 1 0 
De 001 0 0 
110410 
01010 
110041 
3 i. 001 1) 
010i1éi4i1 
4. I 0) 0) al a al al 
1131001441 
103103101 
1110041 0 
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Let x, y, and z be binary n-tuples. Prove each of the following statements. 
1. w(x) = d(x, 0) 
2. d(x, y) =d(x+z,y+z) 
3. d(x, y) = w(x—y) 


A metric ona set X isamapd: X x X >R satisfying the following conditions. 


1. d(x, y) > 0 forallx,y € X; 

2. d(x, y) =0 exactly when x = y; 
3. d(x, y) =d(y,x); 

4. d(x, y) < d(x, z)+d(z, y). 


In other words, a metric is simply a generalization of the notion of distance. Prove that Hamming distance is a metric on Z. 
Decoding a message actually reduces to deciding which is the closest codeword in terms of distance. 


Let C' be a linear code. Show that either the ith coordinates in the codewords of C are all zeros or exactly half of them are 
Zeros. 


Let C be a linear code. Show that either every codeword has even weight or exactly half of the codewords have even weight. 


Show that the codewords of even weight in a linear code C are also a linear code. 


E 
ee 
= 


If we are to use an error-correcting linear code to transmit the 128 ASCII characters, what size matrix must be used? What size 
matrix must be used to transmit the extended ASCII character set of 256 characters? What if we require only error detection in 
both cases? 


Find the canonical parity-check matrix that gives the even parity check bit code with three information positions. What is the 
matrix for seven information positions? What are the corresponding standard generator matrices? 


How many check positions are needed for a single error-correcting code with 20 information positions? With 32 information 
positions? 


Let e; be the binary n-tuple with a 1 in the 7th coordinate and 0's elsewhere and suppose that H € Mmnxn(Z2). Show that He; 
is the 2th column of the matrix H. 


E 
E 
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Let C be an (n, k)-linear code. Define the dual or orthogonal code of C to be 
Ct ={xeZ}:x-y=0 forall y € C}. 


1. Find the dual code of the linear code C' where C is given by the matrix 


1 11 0 0 
0010di1 
100 1 0 


2. Show that C+ is an (n, n — k) -linear code. 
3. Find the standard generator and parity-check matrices of C and C+. What happens in general? Prove your conjecture. 


Let H be an m Xn matrix over Z2, where the ith column is the number 7 written in binary with m bits. The null space of such 
a matrix is called a Hamming code. 


1. Show that the matrix 


generates a Hamming code. What are the error-correcting properties of a Hamming code? 


2. The column corresponding to the syndrome also marks the bit that was in error; that is, the zth column of the matrix is 7 
written as a binary number, and the syndrome immediately tells us which bit is in error. If the received word is (101011), 
compute the syndrome. In which bit did the error occur in this case, and what codeword was originally transmitted? 

3. Give a binary matrix H for the Hamming code with six information positions and four check positions. What are the check 
positions and what are the information positions? Encode the messages (101101) and (001001).Decode the received 
words (0010000101 )and (0000101100).What are the possible syndromes for this code? 

4, What is the number of check bits and the number of information bits in an (m, n)-block Hamming code? Give both an 
upper and a lower bound on the number of information bits in terms of the number of check bits. Hamming codes having 
the maximum possible number of information bits with k check bits are called perfect. Every possible syndrome except O 
occurs as a column. If the number of information bits is less than the maximum, then the code is called shortened. In this 
case, give an example showing that some syndromes can represent multiple errors. 


This page titled 8.7: Exercises is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or curated by 
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8.8: Programming Exercises 


Write a program to implement a (16, 12)-linear code. Your program should be able to encode and decode messages using coset 
decoding. Once your program is written, write a program to simulate a binary symmetric channel with transmission noise. 
Compare the results of your simulation with the theoretically predicted error probability. 


This page titled 8.8: Programming Exercises is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or 
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8.10: Sage 


Sage has a full suite of linear codes and a variety of methods that may be used to investigate them. 


Constructing Linear Codes 


The codes object can be used to get a concise listing of the available implemented codes. Type codes. and press the 
Tab key and most interfaces to Sage will give you a list. You can then use a question mark at the end of a method name to learn 
about the various parameters. 


We will use the classic binary Hamming (7, 4) code as an illustration. “Binary” means we have vectors with just 0's and 1's, the 7 
is the length and means the vectors have 7 coordinates, and the 4 is the dimension, meaning this code has 2* =16 vectors 
comprising the code. The documentation assumes we know a few things from later in the course. We use GF(2) to specify that 
our code is binary — this will make more sense at the end of the course. A second parameter is r and we can see from the 
formulas in the documenation that setting r=3 will give length 7. 


Properties of Linear Codes 
We can examine the Hamming code we just built. First the dimension. 
The code is small enough that we can list all the codewords. 


The minimum distance is perhaps one of the most important properties. Hamming codes always have minimum distance d = 3, so 
they are always single error-correcting. 


We know that the parity-check matrix and the generator matrix are useful for the construction, description and analysis of linear 
codes. The Sage method names are just a bit cryptic. Sage has extensive routines for analyzing matrices with elements from 
different fields, so we perform much of the subsequent analysis of these matrices within Sage. 


The generator matrix here in the text has columns that are codewords, and linear combinations of the columns (the column space of 
the matrix) are codewords. In Sage the generator matrix has rows that are codewords and the row space of the matrix is the code. 
So here is another place where we need to mentally translate between a choice made in the text and a choice made by the Sage 
developers. 


Here is a partial test that these two matrices are correct, exercising Lemma 8.27. Notice that we need to use the transpose of the 
generator matrix, for reasons described above. 


Note that the parity-check may not be canonical and the generator matrix may not be standard. Sage can produce a generator matrix 

that has a set of columns that forms an identity matrix, though no guarantee is made that these columns are the first columns. 

(Columns, not rows.) Such a_— matrix is said to be _ systematic, and the Sage method is 
.systematic_generator_matrix() . 


Decoding with a Linear Code 


We can decode received messages originating from a linear code. Suppose we receive the length 7 binary vector r . 


We can recognize that one or more errors has occured, since 1 is not in the code, as the next computation does not yield the zero 
vector. 


A linear code hasa .decode method. You may choose from several different algorithms, while the Hamming codes have their 
own custom algorithm. The default algorithm is syndrome decoding. 


So if we are willing to assume that only one error occured (which we might, if the probability of an indivual entry of the vector 
being in error is very low), then we see that an error occured in the third position. 


Remember that it could happen that there was more than just one error. For example, suppose the message was the same as before 
and errors occurred in the third, fifth and sixth locations. 


It then appears that we have received a codeword, so we assume no errors at all, and decode incorrectly. 


This page titled 8.10: Sage is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or curated by Thomas 
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CHAPTER OVERVIEW 


9: Isomorphisms 


Many groups may appear to be different at first glance, but can be shown to be the same by a simple renaming of the group 
elements. For example, Z4 and the subgroup of the circle group T generated by 7 can be shown to be the same by demonstrating a 
one-to-one correspondence between the elements of the two groups and between the group operations. In such a case we say that 
the groups are isomorphic. 

9.1: Definition and Examples 

9.2: Direct Products 

9.3: Reading Questions 

9.4: Exercises 

9.5: Sage 

9.6: Sage Exercises 
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9.1: Definition and Examples 


Two groups (G,-) and (H, o) are isomorphic if there exists a one-to-one and onto map ¢: G + Hf such that the group operation 
is preserved; that is, 


(a:b) = 6(a) 0 o(6) 


for all a and 6 in G. If G is isomorphic to H, we write G = H. The map ¢ is called an isomorphism. 


To show that Z4 & (i), define a map ¢: Z, — (i) by ¢(n) =i”. We must show that ¢ is bijective and preserves the group 
operation. 


Solution 


The map ¢ is one-to-one and onto because 


Since 


the group operation is preserved. 


vY Example 9.2 


We can define an isomorphism @ from the additive group of real numbers (IR, +) to the multiplicative group of positive real 
numbers (IR*, -) with the exponential map; 


Solution 
that is, 
d(z +y) =e7"¥ =e7e¥ = d(x) Oly). 


Of course, we must still show that @ is one-to-one and onto, but this can be determined using calculus. 


The integers are isomorphic to the subgroup of Q* consisting of elements of the form 2”. Define a map ¢: Z—> Q* by 


b(n) = 2”. 
Solution 
Then 


o(m+n) =27 = 272” = o(m)d(n). 


By definition the map ¢ is onto the subset {2” : n € Z} of Q*. To show that the map is injective, assume that m #n. If we 
can show that ¢(m) #¢(n), then we are done. Suppose that m > n and assume that ¢(m) = ¢(n). Then 2” = 2” or 
2™~" — 1, which is impossible since m —n > 0. 


vY Example 9.4 


The groups Zg and Z,2 cannot be isomorphic since they have different orders; however, it is true that U(8) ~U(12). We 
know that 
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U(8) = {1, 3,5, 7} 
U(12) = {1,5,7, 11}. 
Solution 
An isomorphism ¢ : U(8) — U(12) is then given by 
lHl 
315 


57 
Trill. 


The map ¢ is not the only possible isomorphism between these two groups. We could define another isomorphism 7 by 
w(1) =1, ¥(3) =11, (5) =5, (7) =7. In fact, both of these groups are isomorphic to Z2 x Zp (see Example 3.28 in 
Chapter 3). 


Even though $3 and Ze possess the same number of elements, we would suspect that they are not isomorphic, because Zg is 
abelian and $3 is nonabelian. To demonstrate that this is indeed the case, suppose that @ : Zs —> S3 is an isomorphism. 


Solution 
Let a, b € S3 be two elements such that ab # ba. Since ¢ is an isomorphism, there exist elements m and n in Ze, such that 
g(m)=a and ¢(n)=b. 
However, 
ab = o(m)o(n) = (m +n) = o(n +m) = 6(n)o(m) = ba, 


which contradicts the fact that a and 6 do not commute. 


& Theorem 9.6 


Let 6: G — H be an isomorphism of two groups. Then the following statements are true. 


1. 6-1 : H +G is an isomorphism. 

2. |G| =|H]. 

3. If G is abelian, then H is abelian. 

4. If G is cyclic, then H is cyclic. 

5. If G has a subgroup of order n, then H has a subgroup of order n. 


Proof 


Assertions (1) and (2) follow from the fact that @ is a bijection. We will prove (3) here and leave the remainder of the 
theorem to be proved in the exercises. 


(3) Suppose that h; and hz are elements of H. Since ¢ is onto, there exist elements gi, 92 € G such that @(g1) =h1 and 
#(g2) = hz. Therefore, 


hy hz = $(91)9(92) = $(9192) = $(9291) = $(92) (91) = hohr. 


We are now in a position to characterize all cyclic groups. 


& Theorem 9.7 


All cyclic groups of infinite order are isomorphic to Z. 


Proof 
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Let G be a cyclic group with infinite order and suppose that a is a generator of G. Define a map ¢:Z—G _ by 
o:nt>a”. Then 


d(m+n) =a™'” =a™a" = 6(m)¢(n). 


To show that ¢ is injective, suppose that m and n are two elements in Z, where m #n. We can assume that m > n. We 
must show that a” # a”. Let us suppose the contrary; that is, a” =a”. In this case a” ” =e, where m—n>0, which 
contradicts the fact that a has infinite order. Our map is onto since any element in G can be written as a” for some integer 
n and ¢(n) =a”. 


& Theorem 9.8 


If G is a cyclic group of order n, then G is isomorphic to Zn. 


Proof 


Let G be a cyclic group of order n generated by a and define a map ¢: Z, > G by d: kro a*, whereO<k<n. The 
proof that @ is an isomorphism is one of the end-of-chapter exercises. 


& Corollary 9.9 


If G is a group of order p, where p is a prime number, then G is isomorphic to Zp. 


Proof 


The proof is a direct result of Corollary 6.12 


The main goal in group theory is to classify all groups; however, it makes sense to consider two groups to be the same if they are 
isomorphic. We state this result in the following theorem, whose proof is left as an exercise. 


& Theorem 9.10 


The isomorphism of groups determines an equivalence relation on the class of all groups 


Cayley's Theorem 


Cayley proved that if G is a group, it is isomorphic to a group of permutations on some set; hence, every group is a permutation 
group. Cayley's Theorem is what we call a representation theorem. The aim of representation theory is to find an isomorphism of 
some group G that we wish to study into a group that we know a great deal about, such as a group of permutations or matrices. 


YW Example 9.11 


Consider the group Z3. The Cayley table for Z3 is as follows. 


The addition table of Z3 suggests that it is the same as the permutation group G = {(0), (012), (021)}. 


Solution 


The isomorphism here is 
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TE 
1(9 12) or 
a(t : 1) = (021) 


& Theorem 9.12. Cayley 


Every group is isomorphic to a group of permutations. 


Proof 


Let G be a group. We must find a group of permutations G that is isomorphic to G. For any g€ G, define a function 
Ag: G—+G by A,(a)=ga. We claim that A, is a permutation of G. To show that A, is one-to-one, suppose that 
Ag(a) = Aq(b). Then 


ga = r4(a) = Ag(b) = gb. 


Hence, a = b. To show that \, is onto, we must prove that for each a € G, there is a b such that \,(b) =a. Letb=g ‘a. 


Now we are ready to define our group G. Let 
G={h,:9€ Gh. 


We must show that G is a group under composition of functions and find an isomorphism between G and G. We have 
closure under composition of functions since 


(Ago An)(@) = Ag(ha) = gha = Ag, (a). 
Also, 
Ae(a) =ea=a 
and 
(Ay-10 Ay) (a) = Ay-1(ga) = 9 *ga =a =d<(a). 
We can define an isomorphism from G to G by @: g++ A,. The group operation is preserved since 
(gh) = Agh = AgAn = $(g9) P(A). 
It is also one-to-one, because if @(g)(a) = o(h)(a), then 
ga = ga = xa = ha. 


Hence, g=h. That ¢ is onto follows from the fact that #(g) = A, for any A, € G 


The isomorphism g++ A, is known as the left regular representation of G. 


Historical Note 


Arthur Cayley was born in England in 1821, though he spent much of the first part of his life in Russia, where his father was a 
merchant. Cayley was educated at Cambridge, where he took the first Smith's Prize in mathematics. A lawyer for much of his adult 
life, he wrote several papers in his early twenties before entering the legal profession at the age of 25. While practicing law he 
continued his mathematical research, writing more than 300 papers during this period of his life. These included some of his best 
work. In 1863 he left law to become a professor at Cambridge. Cayley wrote more than 900 papers in fields such as group theory, 
geometry, and linear algebra. His legal knowledge was very valuable to Cambridge; he participated in the writing of many of the 
university's statutes. Cayley was also one of the people responsible for the admission of women to Cambridge. 
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9.2: Direct Products 


Given two groups G and H, it is possible to construct a new group from the Cartesian product of G and H, Gx H. Conversely, 
given a large group, it is sometimes possible to decompose the group; that is, a group is sometimes isomorphic to the direct product 
of two smaller groups. Rather than studying a large group G, it is often easier to study the component groups of G. 


External Direct Products 


If (G, -) and (H, o) are groups, then we can make the Cartesian product of G and H into a new group. As a set, our group is just 
the ordered pairs (g,h) € Gx H whereg € G andh © H. We can define a binary operation on G x H by 


(91, h1)(g2, ho) = (91 - 92, hi o he); 


that is, we just multiply elements in the first coordinate as we do in G and elements in the second coordinate as we do in H. We 
have specified the particular operations - and o in each group here for the sake of clarity; we usually just write 


(91, h1)(92, ha) = (91.92; hihz). 


& Proposition 9.13 


Let G and H be groups. The set G x H is a group under the operation (g1, h1)(g2, h2) = (9192, hih2) where gi, g2 € G and 
hi, ha € A. 


Proof 


Clearly the binary operation defined above is closed. If eg and ey are the identities of the groups G and H respectively, 
then (eg, ez) is the identity of Gx H. The inverse of (g,h) €GxH is (g-1,h-1). The fact that the operation is 
associative follows directly from the associativity of G and H. 


Y Example 9.14 


Let R be the group of real numbers under addition. 
Solution 


The Cartesian product of R with itself, R xR = R’, is also a group, in which the group operation is just addition in each 
coordinate; that is, (a, b) + (c,d) =(a+c,b+d). The identity is (0, 0) and the inverse of (a, b) is (—a, —b). 


Y Example 9.15 


Consider 
Ze X Za = {(0, 0), (0,1), (1,0), (1, 1)}. 
Solution 


Although Zy x Zz and Z, both contain four elements, they are not isomorphic. Every element (a,b) in Zz x Z» other than the 
identity has order 2, since (a, b) + (a,b) = (0,0); however, Zz is cyclic. 


The group G x # is called the external direct product of G and H. Notice that there is nothing special about the fact that we have 
used only two groups to build a new group. The direct product 


[[Gi HG x Gr x-- «Gn 


i=1 


of the groups G), Gz,..., G, is defined in exactly the same manner. If G= G; = Gz =---=G,, we often write G” instead of 
G1 xX Gp X--+ x Gp. 
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wv Example 9.16 


The group Z5, considered as a set, is just the set of all binary n-tuples. The group operation is the “exclusive or” of two binary 
n-tuples. 


Solution 
For example, 
(01011101) + (01001011) = (00010110). 


This group is important in coding theory, in cryptography, and in many areas of computer science. 


& Theorem 9.17 


Let (g,h) € Gx H. If g and h have finite orders r and s respectively, then the order of (g,h) in G x H is the least common 
multiple of r and s. 
Proof 
Suppose that m is the least common multiple of r and s and let n = |(g, h)|. Then 
(9, h)™ =(g",h™) = (ec, ex) 
(g”,h”) = (g,h)” = (ea, en): 


Hence, n must divide m, and n <m. However, by the second equation, both r and s must divide n; therefore, n is a 
common multiple of r and s. Since m is the least common multiple of r and s, m <n. Consequently, m must be equal to 
n. 


& Corollary 9.18 


Let (g1,---,9n) € [| Gi. If g; has finite order r; in G;, then the order of (g1,.--,9n) in [| G; is the least common multiple 
of \(r_1, \Idots, r_n\text{.}\ 


Y Example 9.19 


Let (8, 56) € Z12 X Zoo. 
Solution 


Since gcd(8, 12) = 4, the order of 8 is 12/4 = 3 in Zy9. Similarly, the order of 56 in Zgo is 15. The least common multiple of 
3 and 15 is 15; hence, (8, 56) has order 15 in Z12 x Zeo. 


Y Example 9.20 


The group Zz x Z3 consists of the pairs 
(0,0), (0,1), (0,2), (1,0), (1,1), (1,2). 
Solution 


In this case, unlike that of Z, x Zz and Zag, it is true that Z, x Z3 = Zg. We need only show that Z, x Z3 is cyclic. It is easy 
to see that (1,1) is a generator for Zz x Z3. 


The next theorem tells us exactly when the direct product of two cyclic groups is cyclic. 
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& Theorem 9.21 


The group Zm X Zn, is isomorphic to Zmp, if and only if gcd(m, n) = 1. 


Proof 


We will first show that if Zn X Zn = Zmn, then gcd(m,n) =1. We will prove the contrapositive; that is, we will show 
that if ged(m,n) =d>1, then Z,, x Z, cannot be cyclic. Notice that mn/d is divisible by both m and n; hence, for 
any element (a,b) € Zm x Zn, 


(a,b) +(a,6)+- 5 (2,0) a (0, 0). 
————— 
mn/d times 
Therefore, no (a, b) can generate all of Zm x Zn. 


The converse follows directly from Theorem 9.17 since \lcm(m, n) = mn if and only if ged(m, n) = 1. 


& Corollary 9.22 


Let n1,..., 7 be positive integers. Then 
k 
| a eee 
i=1 
if and only if gcd(n;,n;) = 1 for \(i \neq j\text{.}\ 
& Corollary 9.23 
mM =p;'--- pe, 


where the p;s are distinct primes, then 


Proof 


Since the greatest common divisor of p5' and a is 1 fori # J, the proof follows from Corollary 9.22 


In Chapter 13, we will prove that all finite abelian groups are isomorphic to direct products of the form 


Ze Kees x Zn 


where p1,..., Px are (not necessarily distinct) primes. 


Internal Direct Products 


The external direct product of two groups builds a large group out of two smaller groups. We would like to be able to reverse this 
process and conveniently break down a group into its direct product components; that is, we would like to be able to say when a 
group is isomorphic to the direct product of two of its subgroups. 


Let G be a group with subgroups H and K satisfying the following conditions. 
© G=HK={hk: he H,ke Kk}; 

e HNK={e}; 

e hk=kh forallke K andhe H. 


Then G is the internal direct product of H and K. 
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Y Example 9.24 


The group U(8) is the internal direct product 
Solution 
of 
H={1,3} and K={1,5}. 


Y Example 9.25 


The dihedral group Dg is an internal direct product of its two subgroups 
H = {\identity, r°} and K = {\identity, r’ir',s,r’s, rs}. 
Solution 


It can easily be shown that kK = S3; consequently, Dg = Ze x S3. 


vY Example 9.26 


Not every group can be written as the internal direct product of two of its proper subgroups. If the group $3 were an internal 
direct product of its proper subgroups H and K, then one of the subgroups, say H, would have to have order 3. 


Solution 


In this case H is the subgroup {(1), (123), (132)}.The subgroup AK must have order 2, but no matter which subgroup we 
choose for K, the condition that hk = kh will never be satisfied forh € H andk ce K. 


& Theorem 9.27 


Let G be the internal direct product of subgroups H and K. Then G is isomorphic to H x K. 


Proof 
Since G is an internal direct product, we can write any element g€ G as g=hk for some h © H and some ke K. 
Defineamap¢:G—>HxK by $(g)=(h,k). 
The first problem that we must face is to show that @ is a well-defined map; that is, we must show that h and k are 


uniquely determined by g. Suppose that g=hk=h’k'. Then h th’ =k(k’) is in both H and K, so it must be the 
identity. Therefore, h = h’ and k =k’, which proves that ¢ is, indeed, well-defined. 


To show that @ preserves the group operation, let g) = hyk, and go = hak and observe that 
$(91.92) = P(Aikih2ke) 
= b(hi hoki kz) 
= (hy ho, ki ka) 
= (hi, k1)(ha, ka) 
= 6(91) (92). 


We will leave the proof that ¢ is one-to-one and onto as an exercise. 


~Y Example 9.28 


The group Ze is an internal direct product isomorphic 


Solution 


to {0, 2,4} x {0, 3}. 


https ://math.libretexts.org/@go/page/81099 


GNU Free Documentation License 


Oibretexts” 


We can extend the definition of an internal direct product of G to a collection of subgroups H), H2,...,H, of G, by requiring 
that 

e G=H,H2--- Hy ={hiho--- hn: hi € Hi}; 

e hyh; = hjhy for all h; € H; and h; E H;. 


We will leave the proof of the following theorem as an exercise. 


& Theorem 9.2.1 


Let G be the internal direct product of subgroups H;, where i = 1,2,...,n. Then G is isomorphic to |]; H;. 


This page titled 9.2: Direct Products is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or curated 
by Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the LibreTexts 
platform; a detailed edit history is available upon request. 


GNU Free Documentation License 


https ://math.libretexts.org/@go/page/81099 


Oibretexts: 


9.3: Reading Questions 


Determine the order of (1, 2) in Z4 x Zg. 
List three properties of a group that are preserved by an isomorphism. 
Find a group isomorphic to Z15 that is an external direct product of two non-trivial groups. 


Explain why we can now say “the infinite cyclic group”? 


7B 2B BEB 


Compare and contrast external direct products and internal direct products. 
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9.4: Exercises 


Prove that Z =nZ forn £0. 


Prove that C* is isomorphic to the subgroup of GLZ2(R) consisting of matrices of the form 


( —b ) 
: 
Prove or disprove: U(8) = Z4. 


Prove that U(8) is isomorphic to the group of matrices 


€ ] @ ae & ) 
Cody OI 0 Wy 0 a 
Show that U(5) is isomorphic to U(10), but U(12) is not. 

Show that the nth roots of unity are isomorphic to Zp. 

Show that any cyclic group of order n is isomorphic to Z,. 


Prove that Q is not isomorphic to Z. 


Let G = R \ {—1} and define a binary operation on G by 
a*b=a+b+ab. 


Prove that G is a group under this operation. Show that (G,*) is isomorphic to the multiplicative group of nonzero real 
numbers. 


Pr : el: a ed ed : ee 


Show that the matrices 


° 
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1 0 0 1 0 0 0 1 0 
0 1 0 001 1 0 0 
001 0 1 0 001 
001 001 0 1 0 
1 0 0 0 1 0 001 
0 1 0 1 0 0 1 0 0 


form a group. Find an isomorphism of G with a more familiar group of order 6. 
Find five non-isomorphic groups of order 8. 
Prove S4 is not isomorphic to Dj. 
Let w = cis(27/7) be a primitive nth root of unity. Prove that the matrices 
1 
ie tis q and B= o 
0 wt 1 0 


generate a multiplicative group isomorphic to D,. 


Show that the set of all matrices of the form 


Gaur 


is a group isomorphic to D,,, where all entries in the matrix are in Z,. 


List all of the elements of Z4 x Zo. 


Find the order of each of the following elements. 


1. (3,4) in Zg x Ze 

De (6, 15, 4) in Z309 x Las x Zo 
3. (5, 10, 15)in Za5 x Z25 x Z25 
4. (8, 8, 8) in Z10 x Zo4 X Zs0 


Prove that D4 cannot be the internal direct product of two of its proper subgroups. 
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Prove that the subgroup of Q* consisting of elements of the form 2”3” for m,n € Z is an internal direct product isomorphic 
toZ x Z. 


Prove that $3 x Zz is isomorphic to Dg. Can you make a conjecture about D2,,? Prove your conjecture. 
Prove or disprove: Every abelian group of order divisible by 3 contains a subgroup of order 3. 
Prove or disprove: Every nonabelian group of order divisible by 6 contains a subgroup of order 6. 


Let G be a group of order 20. If G has subgroups H and K of orders 4 and 5 respectively such that hk = kh for all h €¢ H 
and k € K, prove that G is the internal direct product of H and K. 


Prove or disprove the following assertion. Let G, H, and K be groups. IfGx kK 2=Hx kK, thnG= dH. 
Prove or disprove: There is a noncyclic abelian group of order 51. 
Prove or disprove: There is a noncyclic abelian group of order 52. 


Let 6: G— H bea group isomorphism. Show that ¢(a) = ez if and only if ¢ =eg, where eg and ey are the identities of 
G and H, respectively. 


Let G = H. Show that if G is cyclic, then so is H. 
Prove that any group G of order p, p prime, must be isomorphic to Zp. 


Show that S,, is isomorphic to a subgroup of A,+2. 


= 
= 
= 
E 
in 
= 
iz 
E 
ea 
& 
= 
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Prove that D,, is isomorphic to a subgroup of S,,. 


Let d: G; > Gy andy: Gz — G3 be isomorphisms. Show that ¢~! and wo ¢ are both isomorphisms. Using these results, 
show that the isomorphism of groups determines an equivalence relation on the class of all groups. 


Prove U(5) & Z4. Can you generalize this result for U(p), where p is prime? 
Write out the permutations associated with each element of 3 in the proof of Cayley's Theorem. 


An automorphism of a group G is an isomorphism with itself. Prove that complex conjugation is an automorphism of the 
additive group of complex numbers; that is, show that the map ¢(a+ bt) =a —bi is an isomorphism from C to C. 


Prove that a+ib++ a —ib is an automorphism of C*. 
Prove that A++ B™! AB is an automorphism of $Z2(R) for all B in GL2(R). 


We will denote the set of all automorphisms of G by \aut(G). Prove that \aut(G) is a subgroup of Sg, the group of 
permutations of G. 


Find 


a 


aut (Ze). 


Find 


ce 


aut(Z). 


Find two nonisomorphic groups G and H such that \aut(G) = \aut(H). 


a: 2: 


Let G be a group and g € G. Define a map i, : G—> G by i,(x) = gz g_'. Prove that i, defines an automorphism of G. Such 
an automorphism is called an inner automorphism. The set of all inner automorphisms is denoted by \inn(G). 
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Prove that \inn(G) is a subgroup of \aut(G). 


a 


What are the inner automorphisms of the quaternion group Qs? Is \inn(G) = \aut(G) in this case? 


Let G be a group and g€ G. Define maps \:G—>G and p,:G—>G by X,(x) =gzx and p,(x) =2g~'. Show that 
tg = Pg gq is an automorphism of G. The isomorphism g++ pg is called the right regular representation of G. 


Let G be the internal direct product of subgroups H and K’. Show that the map ¢:G— Hx K defined by ¢(g) = (h, k) for 
g=hk, where h € H andk € K, is one-to-one and onto. 


Let G and H be isomorphic groups. If G has a subgroup of order n, prove that H must also have a subgroup of order n. 


If G&G and H &H, show thatGx HYGxH. 


Prove that G x H is isomorphic to H x G. 


Let n1,..., 7, be positive integers. Show that 


if and only if ged(n;,n;) =1 fori #7. 


Prove that A x B is abelian if and only if A and B are abelian. 


If G is the internal direct product of H,, H2,..., Hn, prove that G is isomorphic to ||; Hi. 


Let H, and Hy, be subgroups of G; and G2, respectively. Prove that H, x H» is asubgroup of G; x G2. 


, 
re 
rz 
= 
= 
fe 
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Let m,n € Z. Prove that (m,n) = (d) if and only if d = gcd(m, n). 


Let m,n € Z. Prove that (m)M (n) = (1) if and only if 1 = \lem(m,n). 


Groups of order 


In this series of exercises we will classify all groups of order 2p, where p is an odd prime. 


1. Assume G is a group of order 2p, where p is an odd prime. If a € G, show that a must have order 1, 2, p, or 2p. 

2. Suppose that G has an element of order 2p. Prove that G' is isomorphic to Z2,. Hence, G is cyclic. 

3. Suppose that G does not contain an element of order 2p. Show that G must contain an element of order p. Hint: Assume 
that G does not contain an element of order p. 

4. Suppose that G does not contain an element of order 2:—. Show that G must contain an element of order 2. 

. Let P be a subgroup of G with order p and y € G have order 2. Show that yP = Py. 

6. Suppose that G does not contain an element of order 2p and P = (z) is a subgroup of order p generated by z. If y is an 
element of order 2, then yz = z*y for some 2 <k <p. 

7. Suppose that G' does not contain an element of order 2p. Prove that G is not abelian. 

8. Suppose that G does not contain an element of order 2p and P = (z) is a subgroup of order p generated by z and y is an 
element of order 2. Show that we can list the elements of G as {z*yJ |0 <i <p,0<j<2}. 

9. Suppose that G does not contain an element of order 2p and P = (z) is a subgroup of order p generated by z and y is an 
element of order 2. Prove that the product (z‘y’)(z"y*) can be expressed as a uniquely as z™y” for some non negative 
integers m, n. Thus, conclude that there is only one possibility for a non-abelian group of order 2p, it must therefore be the 
one we have seen already, the dihedral group. 


uo 


This page titled 9.4: Exercises is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or curated by 
Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the LibreTexts 


platform; a detailed edit history is available upon request. 


GNU Free Documentation License https ://math.libretexts.org/@go/page/81101 


Oibreexts: 


9.5: Sage 


Sage has limited support for actually creating isomorphisms, though it is possible. However, there is excellent support for 
determining if two permutation groups are isomorphic. This will allow us to begin a little project to locate all of the groups of order 
less than 16 in Sage's permutation groups. 


Isomorphism Testing 


If G and H_ are two permutation groups, then the command G.is_isomorphic(H) willreturn True or False as 
the two groups are, or are not, isomorphic. Since “isomorpic to” is an equivalence relation by Theorem 9.10, it does not matter 
which group plays the role of G and which plays the role of H . 


So we have a few more examples to work with, let us introduce the Sage command that creates an external direct product. If G 
and H_ are two permutation groups, then the command direct product _permgroups({[G,H])_ will return the external 
direct product as a new permutation group. Notice that this is a function (not a method) and the input is a list. Rather than just 
combining two groups in the list, any number of groups can be supplied. We illustrate isomorphism testing and direct products in 
the context of Theorem 9.21, which is an equivalence, so tells us exactly when we have isomorphic groups. We use cyclic 
permutation groups as stand-ins for Z,, by Theorem 9.8. 


First, two isomorphic groups. 
Now, two non-isomorphic groups. 


Notice how the simple computation of a greatest common divisor predicts the incredibly complicated computation of determining 
if two groups are isomorphic. This is a nice illustration of the power of mathematics, replacing a difficult problem (group 
isomorphism) by a simple one (factoring and divisibility of integers). Let us build one more direct product of cyclic groups, but 
with three groups, each with orders that are pairwise relatively prime. 


If you try the following with larger parameters you may get an error( database_gap ). 


Classifying Finite Groups 
Once we understand isomorphic groups as being the “same”, or “fundamentally no different,” or “structurally identical,” then it is 


natural to ask how many “really different” finite groups there are. Corollary 9.9 gives a partial answer: for each prime there is just 
one finite group, with Z, as a concrete manifestation. 


Let us embark on a quest to find all the groups of order less than 16 in Sage as permutation groups. For prime orders 1, 2, 3,5, 7, 11 
and 13 we know there is really just one group each, and we can realize them all: 


So now our smallest unknown case is order 4. Sage knows at least three such groups, and we can use Sage to check if any pair is 
isomorphic. Notice that since “isomorphic to” is an equivalence relation, and hence a transitive relation, the two tests below are 
sufficient. 


So we have at least two different groups: Z4 and Z, x Zz, with the latter also known as the Klein 4-group. Sage will not be able to 
tell us if we have a complete list — this will always require theoretical results like Theorem 9.10. We will shortly have a more 
general result that handles the case of order 4, but right now, a careful analysis (by hand) of the possibilities for the Cayley table of 
a group of order 4 should lead you to the two possibilities above as the only possibilities. Try to deduce what the Cayley table of an 
order 4 group should look like, since you know about identity elements, inverses and cancellation. 


We have seen at least two groups of order 6 (next on our list of non-prime orders). One is abelian and one is not, so we do not need 
Sage to tell us they are structurally different. But let us do it anyway. 


Is that all? There is Z3 x Zp, but that is just Zg since 2 and 3 are relatively prime. The dihedral group, D3, all symmetries of a 
triangle, is just 3, the symmetric group on 3 symbols. 


Exercise 9.4.55 from this section classifies all groups of order 2p, where p is a prime. Such a group is either cyclic or a dihedral 
group. So the two groups above, Zg¢ and Ds, are the complete list of groups of order 6. 


By this general result, in addition to order 6, we also know the complete lists of groups of orders 10 and 14. To Be Continued. 
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Internal Direct Products 


An internal direct product is a statement about subgroups of a single group, together with a theorem that links them to an external 
direct product. We will work an example here that will illustrate the nature of an internal direct product. 


Given an integer n, the set of positive integers less than n, and relatively prime to n forms a group under multiplication mod n. We 
will work in the set Integers(n) where we can add and multiply, but we want to stay strictly with multiplication only. 


First we build the subgroup itself. Notice how we must convert X into an integer (an element of ZZ ) so that the greatest 
common divisor computation performs correctly. 


So we have a group of order 12. We are going to try to find a subgroup of order 6 and a subgroup of order 2 to form the internal 
direct product, and we will restrict our search initially to cyclic subgroups of order 6. Sage has a method that will give the order of 
each of these elements, relative to multiplication, so let us examine those next. 


We have many choices for generators of a cyclic subgroup of order 6 and for a cyclic subgroup of order 2. Of course, some of the 

choices for a generator of the subgroup of order 6 will generate the same subgroup. Can you tell, just by counting, how many 

subgroups of order 6 there are? We are going to pick the first element of order 6, and the last element of order 2, for no particular 

reason. After your work through this once, we encourage you to try other choices to understand why some choices lead to an 

internal direct product and some do not. Notice that we choose the elements from the list U so that they are sure to be elements of 
Z36 and behave properly when multiplied. 


So A and Bare two cyclic subgroups. Notice that their intersection is the identity element, one of our requirements for an 
internal direct product. So this is a good start. 


Z36 is an abelian group, thus the condition on all products commuting will hold, but we illustrate the Sage commands that will 
check this in a non-abelian situation. 


Finally, we need to check that by forming products with elements from A and B_ we create the entire group. Sorting the 
resulting list will make a check easier for us visually, and is required if we want Sage to do the check. 


That's it. We now condense all this information into the statement that “ U is the internal direct product of A and B .” By 
Theorem 9.27, we see that U is isomorphic to a product of a cyclic group of order 6 and a cyclic group of order 2. So in a very 
real sense, U is no more or less complicated than Zg x Z2, which is in turn isomorphic to Z3 x Zp x Zz. So we totally 
understand the “structure” of U . For example, we can see that U is not cyclic, since when written as a product of cyclic groups, 
the two orders are not relatively prime. The final expression of U suggests you could find three cyclic subgroups of U , with 
orders 3,2 and2,sothat U is an internal direct product of the three subgroups. 
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9.6: Sage Exercises 


This exercise is about putting Cayley's Theorem into practice. First, read and study the theorem. Realize that this result by 
itself is primarily of theoretical interest, but with some more theory we could get into some subtler aspects of this (a subject 
known as “representation theory”). 


You should create these representations mostly with pencil-and-paper work, using Sage as a fancy calculator and assistant. You 
do not need to include all these computations in your worksheet. Build the requested group representations and then include 
enough verifications in Sage to prove that that your representation correctly represents the group. 


Begin by building a permutation representation of the quaternions, Q. There are eight elements in Q (+1, +/,+J, +K), so 
you will be constructing a subgroup of Sg. For each g€ Q form the function T,, defined as T,(«) = ag. Notice that this 
definition is the “reverse” of that given in the text. This is because Sage composes permutations left-to-right, while your text 
composes right-to-left. To create the permutations T,, the two-line version of writing permutations could be very useful as an 
intermediate step. You will probably want to “code” each element of Q with an integer in {1,2,...,8}. 


One such representation is included in Sage as QuaternionGroup( ) — your answer should look very similar, but 
perhaps not identical. Do not submit your answer for a representation of the quaternions, but I strongly suggest working this 
particular group representation until you are sure you have it right — the problems below might be very difficult otherwise. 
You can use Sage's .iS_isomorphic() method to check if your representations are correct. However, do not use this as 
a substitute for the part of each question that asks you to investigate properties of your representation towards this end. 


1. Build the permutation representation of Z, x Z4 described in Cayley's Theorem. (Remember that this group is additive, 
while the theorem uses multiplicative notation.) Include the representation of each of the 8 elements in your submitted 
work. Then construct the permutation group as a subgroup of a full symmetric group that is generated by exactly two of the 
eight elements you have already constructed. Hint: which two elements of Zz x Z4 might you use to generate all of 
Zo, x Zs? Use commands in Sage to investigate various properties of your permutation group, other than just .list() , 
to provide evidence that your subgroup is correct — include these in your submitted worksheet. 

2. Build a permutation representation of U(24), the group of units mod 24. Again, list a representation of each element in 
your submitted work. Then construct the group as a subgroup of a full symmetric group created with three generators. To 
determine these three generators, you will likely need to understand U(24) as an internal direct product. Use commands in 
Sage to investigate various properties of your group, other than just .1list() , to provide evidence that your subgroup is 
correct — include these in your submitted worksheet. 


Consider the symmetries of a 10-gon, D19 in your text, DihedralGroup(10) in Sage. Presume that the vertices of the 
10-gon have been labeled 1 through 10 in order. Identify the permutation that is a 180 degree rotation and use it to generate a 
subgroup R of order 2. Then identify the permutation that is a 72 degree rotation, and any one of the ten permutations that are 
a reflection of the 10-gon about a line. Use these latter two permutations to generate a subgroup S of order 10. Use Sage to 
verify that the full dihedral group is the internal direct product of the subgroups R and S' by checking the conditions in the 
definition of an internal direct product. 


We have a theorem which says that if a group is an internal direct product, then it is isomorphic to some external direct 
product. Understand that this does not mean that you can use the converse in this problem. In other words, establishing an 
isomorphism of G with an external direct product does not prove that G is an internal direct product. 
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CHAPTER OVERVIEW 


10: Normal Subgroups and Factor Groups 


If H is a subgroup of a group G, then right cosets are not always the same as left cosets; that is, it is not always the case that 
gH = Hg for all g¢ G. The subgroups for which this property holds play a critical role in group theory—they allow for the 
construction of a new class of groups, called factor or quotient groups. Factor groups may be studied directly or by using 
homomorphisms, a generalization of isomorphisms. We will study homomorphisms in Chapter 11. 

10.1: Factor Groups and Normal Subgroups 

10.2: The Simplicity of the Alternating Groups 

10.3: Reading Questions 

10.4: Exercises 

10.5: Sage 

10.6: Sage Exercises 
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10.1: Factor Groups and Normal Subgroups 
A subgroup H of a group G is normal in G if gH = Hg for all g € G. That is, a normal subgroup of a group G is one in which 


the right and left cosets are precisely the same. 


Y Example 10.1 


Let G be an abelian group. Every subgroup H of G is a normal subgroup. 


Solution 
Since gh = hg forall g€ G andh € H, it will always be the case that gH = Hg. 


Y Example 10.2 


Let H be the subgroup of 3 consisting of elements (1) and (12). Since 
(123)H = {(123),(13)} and HA(123)={(123), (23)}, 
H cannot be a normal subgroup of 53. 


Solution 
However, the subgroup JN, consisting of the permutations (1), (1 2 3), and (13 2), is normal since the cosets of NV are 


Ny Stab Lea sea 
(aN = Ni) =") (aa 


The following theorem is fundamental to our understanding of normal subgroups. 


& Theorem 10.3 


Let G be a group and N be a subgroup of G. Then the following statements are equivalent. 


1. The subgroup N is normal in G. 
2. For allg€é G, gNg 1 CN. 
3. For allg€ G, gNg 1 =N. 


Proof 
(1) = (2). Since N is normal in G, gN = Ng for all g € G. Hence, for a given g€ G andn€ N, there exists an n’ in N 


such that gn = n'g. Therefore, gng-t=n'€ N orgNg 1 CN. 
(2) = (8). Let ge G. Since gNg-! CN, we need only show N CgNg"t. ForneE N, g-'ng=g'n(g1)1 EN. 
Hence, g-!ng=n! for some n! € N. Therefore, n = gn'g! isingNg!. 


(3) = (1). Suppose that gNg~! = N for all g€ G. Then for any n € N there exists an n’ € N such that gng! =n’. 
Consequently, gn = n'g or gN C Ng. Similarly, Ng C gN. 


Factor Groups 
If N is a normal subgroup of a group G, then the cosets of N in G form a group G/N under the operation (aN )(bN) = abN. 
This group is called the factor or quotient group of G and N. Our first task is to prove that G/N is indeed a group. 


& Theorem 10.4 


Let N be anormal subgroup of a group G. The cosets of N in G form a group G/N of order [G': N]. 


Proof 
The group operation on G/N is (aN)(bN) =abN. This operation must be shown to be well-defined; that is, group 
multiplication must be independent of the choice of coset representative. LetaN =bN andcN =dN. We must show that 
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Then a = bn; andc=dnz for some nj and nz in N. Hence, 


acN = bn,dn2N 
= bn4 dN 
= bn, Nd 
=bNd 
=bdN. 


(aN)(cN) =acN = bdN = (bN)(dN). 


The remainder of the theorem is easy: eN = N is the identity and g 1 N is the inverse of gN. The order of G/N is, of 
course, the number of cosets of NV in G. 


It is very important to remember that the elements in a factor group are sets of elements in the original group. 


wv Example 10.5 


Consider the normal subgroup of S3, N = {(1), (123), (13 2)}.The cosets of NV in $3 are N and (12). The factor group 
S3/N has the following multiplication table. 


Solution 


This group is isomorphic to Z. At first, multiplying cosets seems both complicated and strange; however, notice that S3/N is 
a smaller group. The factor group displays a certain amount of information about $3. Actually, N = A3, the group of even 
permutations, and (1 2).N = {(12), (13), (23)}is the set of odd permutations. The information captured in G/N is parity; 
that is, multiplying two even or two odd permutations results in an even permutation, whereas multiplying an odd permutation 
by an even permutation yields an odd permutation. 


Y Example 10.6 


Consider the normal subgroup 3Z of Z. The cosets of 3Z in Z are 
0+3Z ={...,—3,0,3,6,...} 
1+3Z ={...,—-2,1,4,7,...} 
2+3Z ={...,—1,2,5,8,...}. 


Solution 


The group Z/3Z is given by the Cayley table below. 


ate 0+3Z 14+3Z 2+43Z 


0+3Z |0+3Z 1+4+3Z 2432 
14+3Z |14+3Z 24+3Z 0+3Z 
2+3Z|)2+3Z 0+3Z 1+3Z 


In general, the subgroup nZ of Z is normal. The cosets of Z/nZ are 


nZ 
1+nZ 
2+nZ 


(n—1)+nZ. 
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The sum of the cosets k-+nZ andl+nZ isk+1+mnZ. Notice that we have written our cosets additively, because the group 
operation is integer addition. 


wv Example 10.7 


Consider the dihedral group D,,, generated by the two elements r and s, satisfying the relations 
r” = \identity 
s’ — \identity 


srs=r. 


Solution 


The element r actually generates the cyclic subgroup of rotations, R,, of D,. Since srs"! = srs =r-! € R,, the group of 
rotations is a normal subgroup of D,,; therefore, D,,/R, is a group. Since there are exactly two elements in this group, it must 


be isomorphic to Zg. 
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10.2: The Simplicity of the Alternating Groups 


Of special interest are groups with no nontrivial normal subgroups. Such groups are called simple groups. Of course, we already 
have a whole class of examples of simple groups, Z,, where p is prime. These groups are trivially simple since they have no proper 
subgroups other than the subgroup consisting solely of the identity. Other examples of simple groups are not so easily found. We 
can, however, show that the alternating group, A,,, is simple for n > 5. The proof of this result requires several lemmas. 


& Lemma 10.8 


The alternating group A, is generated by 3-cycles for n > 3. 


Proof 
To show that the 3-cycles generate A,,, we need only show that any pair of transpositions can be written as the product of 
3-cycles. Since (a, b) = (b, a), every pair of transpositions must be one of the following: 


(a, b)(a, b) = \identity 
(a, b)(c, d) = (a,c, b)(a, c, d) 
(a, b)(a, c) = (a,c, 8). 


& Lemma 10.9 


Let N be anormal subgroup of A, where n > 3. If N contains a 3-cycle, then N = Ay. 


Proof 


We will first show that A, is generated by 3-cycles of the specific form (2, j,k), where i and j are fixed in {1,2,...,n} 
and we let & vary. Every 3-cycle is the product of 3-cycles of this form, since 


(i,a, J) = (i, 3,4)? 

(2 50;6)— (tag, 0) tga) 

Gig) 0) = 057,00) 9.0) 

Cue Giga) (17,6) (9,0) (5 s,e): 


Now suppose that NV is a nontrivial normal subgroup of A, form > 3 such that N contains a 3-cycle of the form (i, j, a). 
Using the normality of NV, we see that 


[(é, )(a, k)|(é, 5, 2)? [(4, 4)(a, k)] * = (6, 4, k) 
is in N. Hence, N must contain all of the 3-cycles (i, j,k) forl1 <k<n. By Lemma 10.8 these 3-cycles generate A,; 
hence, VN = A,. 


& Lemma 10.10 


For n > 5, every nontrivial normal subgroup N of A, contains a 3-cycle. 
Proof 
Let o be an arbitrary element in a normal subgroup NV. There are several possible cycle structures for o. 


a is a 3-cycle. o is the product of disjoint cycles, o = T(a1, a2,...,a,) € N, wherer > 3. a is the product of disjoint 
cycles, ¢ = T(a1, Q2, @3)(@4, a5, a6). © =7(a1,42,a3), where 7 is the product of disjoint 2-cycles. 
0 =7(Q1, @2)(a3, a4), where 7 is the product of an even number of disjoint 2-cycles. 


uw * (a1, 43)(a2, a4) (4(a1,a3)(a2, a4) € N 


and 
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pw * (a1, a3)(a2, a4) u(a1, a3)(a2, a4) = (a1, baz) (a1, a3) (a2, a4)(a1, a3, b)(a1, a3) (a2, a4) 
= (a1a3b). 


Therefore, N contains a 3-cycle. This completes the proof of the lemma. 


If o is a 3-cycle, then we are done. If N contains a product of disjoint cycles, o, and at least one of these cycles has length 
greater than 3, say 0 = T(a@1,Q@2,...,@,), then 


(a1, @2, a3)o(a1, ao, age. 
is in N since N is normal; hence, 
o* (a1, @2,43)0(a1, 42,03) 
is also in NV. Since 
o*(a1, a2, 03)0(a1, 02,03) =o (a1, a2, a3)0(a1, a3, a2) 
Gio, ane 1a ai Op, Gs) (aia, ma, (Gre eas) 


Q1, Ap, Qp1,---,@2)(G1, G2, @3)(a1, @2,...,G,)(a1, a3, a2) 
a (a1, a3, ar), 


=( 
=( 


N must contain a 3-cycle; hence, N = Ap. 


Now suppose that NV contains a disjoint product of the form 


o =7(1, 42, 43) (a4, 5, ag). 


Then 
o + (a1, a2, a4)o(a1, a2, ayn EN 
since 
(a1, a2, 04)o(a;, a2,04)* EN. 
So 


o'(a1,@2,a4)0(a1, 42,44) > =[r(a1, a2, a3)(a4, a5, a6)| 1 (a1, a2, @4)T(a1, a2, @3)(A4, a5, 06)(A1, a2, a4)! 
= (a4, a6, a5 )(a1, 43, @2)T * (a1, a2, @4)T(a1, a2, A3)(A4, a5, a6)(a1, a4, a2) 
= (a4, a6, 5 )(a1, 43, @2)(a1, Az, 4)(A1, Az, @3)(4, 45, ag) (41, a4, a2) 
= (a1, a4, a2, Ag, a3). 
So N contains a disjoint cycle of length greater than 3, and we can apply the previous case. 


Suppose NV contains a disjoint product of the form o = T(a1, a2, a3), where 7 is the product of disjoint 2-cycles. Since 
o €N, o? EN, and 


o* =7(a1, a2, a3)T(a1, a2, a3) 
= (a1, 43, a). 
So N contains a 3-cycle. 
The only remaining possible case is a disjoint product of the form 
o =7(a1, @2)(az3, a4), 
where 7 is the product of an even number of disjoint 2-cycles. But 
a * (a1, @2,43)o(a1, 42,03) * 


is in N since (a1, a2, @3)o(a1, a2,a3) | is in N; and so 


Ge (a1, a2, a3)o(a1, a2, a3) | =r" (a1, a2) (a3, @4)(a1, a2, a3)T(a1, a2)(a3, a4) (a1, a2, a3)" 
= (a1, a3)(a2, aa). 
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| Since n > 5, we can find b € {1,2,...,n}such that b £ aj, ag, a3, a4. Let pp = (a1, a3, b). Then 


& Theorem 10.11 


The alternating group, Ap, is simple for n > 5. 


Proof 


Let N be a normal subgroup of A,. By Lemma 10.10 N contains a 3-cycle. By Lemma 10.9 N = A,; therefore, A,, 
contains no proper nontrivial normal subgroups for n > 5. 


Historical Note 


One of the foremost problems of group theory has been to classify all simple finite groups. This problem is over a century old and 
has been solved only in the last few decades of the twentieth century. In a sense, finite simple groups are the building blocks of all 
finite groups. The first nonabelian simple groups to be discovered were the alternating groups. Galois was the first to prove that As 
was simple. Later, mathematicians such as C. Jordan and L. E. Dickson found several infinite families of matrix groups that were 
simple. Other families of simple groups were discovered in the 1950s. At the turn of the century, William Burnside conjectured that 
all nonabelian simple groups must have even order. In 1963, W. Feit and J. Thompson proved Burnside's conjecture and published 
their results in the paper “Solvability of Groups of Odd Order,” which appeared in the Pacific Journal of Mathematics. Their proof, 
running over 250 pages, gave impetus to a program in the 1960s and 1970s to classify all finite simple groups. Daniel Gorenstein 
was the organizer of this remarkable effort. One of the last simple groups was the “Monster,” discovered by R. Greiss. The 
Monster, a 196,833 x 196,833matrix group, is one of the 26 sporadic, or special, simple groups. These sporadic simple groups are 
groups that fit into no infinite family of simple groups. Some of the sporadic groups play an important role in physics. 
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10.3: Reading Questions 


Let G be the group of symmetries of an equilateral triangle, expressed as permutations of the vertices numbered 1, 2, 3. Let H 
be the subgroup H = ((12)). Build the left and right cosets of H in G. 


Based on your answer to the previous question, is H normal in G? Explain why or why not. 
The subgroup 8Z is normal in Z. In the factor group Z/8Z perform the computation (3 + 8Z) + (7 +8Z). 
List two statements about a group G and a subgroup H that are equivalent to “H is normal in G.” 


In your own words, what is a factor group? 


2B :B BB 
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10.4: Exercises 


For each of the following groups G,, determine whether H is a normal subgroup of G. If H is a normal subgroup, write out a 
Cayley table for the factor group G/H. 


1.G=S, and H= A, 

2.G=As and H = {(1), (123), (132)} 
3.G=S, andH =D, 

4.G=Qs and H = {1, -1,/,-I} 
5.G=Z and H =5Z 


Find all the subgroups of D4. Which subgroups are normal? What are all the factor groups of D4 up to isomorphism? 


Find all the subgroups of the quaternion group, Qg. Which subgroups are normal? What are all the factor groups of Qg up to 
isomorphism? 


Let T be the group of nonsingular upper triangular 2 x 2 matrices with entries in R; that is, matrices of the form 


GS 


where a, b, c€ R andac £0. Let U consist of matrices of the form 


Gal 


where x € R. 


1. Show that U is a subgroup of T’. 
2. Prove that U is abelian. 

3. Prove that U is normal in T’. 

4. Show that T'/U is abelian. 

5. Is T normal in GZ2(R)? 


Show that the intersection of two normal subgroups is a normal subgroup. 


If G is abelian, prove that G'/ H must also be abelian. 


3B eB 


Prove or disprove: If H is a normal subgroup of G such that H and G/H are abelian, then G is abelian. 
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If G is cyclic, prove that G/H must also be cyclic. 


Prove or disprove: If H and G/H are cyclic, then G is cyclic. 


a: 


Let H be a subgroup of index 2 of a group G. Prove that H must be a normal subgroup of G. Conclude that S,, is not simple 
forn > 3. 


If a group G has exactly one subgroup H of order k, prove that H is normal in G. 


Define the centralizer of an element g in a group G to be the set 
C(g) ={x# € G:2g= gz}. 


Show that C'(g) is a subgroup of G. If g generates a normal subgroup of G, prove that C’(g) is normal in G. 


g 
- 
: 


Recall that the center of a group G is the set 
Z(G) = {a € G: xg= gz for all gc G}. 


1. Calculate the center of $3. 

2. Calculate the center of GL2(R). 

3. Show that the center of any group G is a normal subgroup of G. 
4. If G/ Z(G) is cyclic, show that G is abelian. 


Let G be a group and let G’ = (aba~!b-'); that is, G’ is the subgroup of all finite products of elements in G of the form 
aba~'b~!. The subgroup G’ is called the commutator subgroup of G. 


1. Show that G’ is a normal subgroup of G. 
2. Let N be a normal subgroup of G. Prove that G/N is abelian if and only if N contains the commutator subgroup of G. 
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10.5: Sage 


Sage has several convenient functions that will allow us to investigate quickly if a subgroup is normal, and if so, the nature of the 
resulting quotient group. But for an initial understanding, we can also work with the raw cosets. Let us get our hands dirty first, 
then learn about the easy way. 


Multiplying Cosets 


The definiton of a factor group requires a normal subgroup, and then we define a way to “multiply” two cosets of the subgroup to 
produce another coset. It is important to realize that we can interpret the definition of a normal subgroup to be exactly the condition 
we need for our new multiplication to be workable. We will do two examples — first with a normal subgroup, then with a subgroup 
that is not normal. 


Consider the dihedral group Dg that is the symmetry group of an 8-gon. If we take the element that creates a quarter-turn, we can 
use it generate a cyclic subgroup of order 4. This will be a normal subgroup (trust us for the moment on this). First, build the (right) 
cosets (notice there is no output): 


So C isa list of lists, with every element of the group G_ occuring exactly once somewhere. You could ask Sage to print out 

C for you if you like, but we will try to avoid that here. We want to multiply two cosets (lists) together. How do we do this? Take 
any element out of the first list, and any element out of the second list and multiply them together (which we know how to do since 
they are elements of G ). Now we have an element of G . What do we do with this element, since we really want a coset as the 
result of the product of two cosets? Simple — we see which coset the product is in. Let us give it a try. We will multiply coset 1 
with coset 3 (there are 4 cosets by Lagrange's Theorem). Study the following code carefully to see if you can understand what it is 
doing, and then read the explanation that follows. 


What have we accomplished? In the first line we create p as the product of two group elements, one from coset 1 and one from 
coset 3( C{[1] , C[3] ). Since we can choose any element from each coset, we choose the first element of each( C{ |[0@] ). 
Then we count our way through all the cosets, selecting only cosets that contain p . Since p_ will only be in one coset, we 
expect a list with just one element. Here, our one-element list contains only 2 . So we say the product of coset 1 and coset 3 is 
coset 2. 


The point here is that this result (coset 1 times coset 3 is coset 2) should always be the same, no matter which elements we pick 
from the two cosets to form p . So let us do it again, but this time we will not simply choose the first element from each of coset 1 
and coset 3, instead we will choose the third element of coset 1 and the second element of coset 3 (remember, we are counting 
from zero!). 


c 


Good. We have the same result. If you are still trusting us on S being a normal subgroup of G , then this is the result that the 
theory predicts. Make a copy of the above compute cell and try other choices for the representatives of each coset. Then try the 
product of other cosets, with varying representatives. 


Now is a good time to introduce a way to extend Sage and add new functions. We will design a coset-multiplication function. Read 
the following carefully and then see the subsequent explanation. 


The first line creates a new Sage function named coset_product . This is accomplished with the word def , and note the 
colon ending the line. The inputs to the function are the numbers of the cosets we want to multiply and the complete list of the 
cosets. The middle two lines should look familiar from above. We know c_ isaone-element list,so c{0]| will extract this one 
coset number, and return is what determines that this is the output of the function. Notice that the indentation above must be 
exactly as shown. We could have written all this computation on a single line without making a new function, but that begins to get 
unwieldly. You need to execute the code block above to actually define the function, and there will be no output if successful. Now 
we can use our new function to repeat our work above: 


Now you know the basics of how to add onto Sage and do much more than it was designed for. And with some practice, you could 
suggest and contribute new functions to Sage, since it is an open source project. Nice. 


Now let us examine a situation where the subgroup is not normal. So we will see that our definition of coset multiplication is 
insufficient in this case. And realize that our new coset_product function is also useless since it assumes the cosets come 
from a normal subgroup. 
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Consider the alternating group A, which we can interpet as the symmetry group of a tetrahedron. For a subgroup, take an element 
that fixes one vertex and rotates the opposite face — this will generate a cyclic subgroup of order 3, and by Lagrange's Theorem we 
will get four cosets. We compute them here. (Again, no output is requested.) 


Again, let's consider the product of coset 1 and coset 3: 
Again, but now for coset 3, choose the second element of the coset to produce the product p : 


So, is the product of coset 1 and coset 3 equal to coset 0 or coset 2? We cannot say! So there is no way to construct a quotient 
group for this subgroup. You can experiment some more with this subgroup, but in some sense, we are done with this example — 
there is nothing left to say. 


Sage Methods for Normal Subgroups 


You can easily ask Sage if a subgroup is normal or not. This is viewed as a property of the subgroup, but you must tell Sage what 
the “supergroup” is, since the answer can change depending on this value. (For example H.is_normal(H) will always be 
True .) Here are our two examples from above. 


The text proves in Section 10.2 that As is simple, i.e. As has no normal subgroups. We could build every subgroup of As and ask 
if it is normal in As using the .is_normal() method. But Sage has this covered for us already. 


We can also build a quotient group when we have a normal subgroup. 


This is useful, but also a bit unsettling. We have the quotient group, but any notion of cosets has been lost, since Q_ is returned as 
a new permutation group on a different set of symbols. We cannot presume that the numbers used for the new permutation group 

Q bear any resemblance to the cosets we get from the .cosets() method. But we can see that the quotient group is 
described as a group generated by two elements of order two. We could ask for the order of the group, or by Lagrange's Theorem 
we know the quotient has order 4. We can say now that there are only two groups of order four, the cyclic group of order 4 and a 
non-cyclic group of order 4, known to us as the Klein 4-group or Z2 x Zg. This quotient group looks like the non-cyclic one since 
the cyclic group of order 4 has just one element of order 2. Let us see what Sage says. 


Yes, that's it. 


Finally, Sage can build us a list of all of the normal subgroups of a group. The list of groups themselves, as we have seen before, is 
sometimes an overwhelming amount of information. We will demonstrate by just listing the orders of the normal subgroups 
produced. 


So, in particular, we see that our “quarter-turn” subgroup is the only normal subgroup of order 4 in this group. 
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10.6: Sage Exercises 


Build every subgroup of the alternating group on 5 symbols, A;, and check that each is not a normal subgroup (except for the 
two trivial cases). This command might take a couple seconds to run. Compare this with the time needed to run the 

.is_simple() method and realize that there is a significant amount of theory and cleverness brought to bear in speeding 
up commands like this. (It is possible that your Sage installation lacks GAP's “Table of Marks” library and you will be unable 
to compute the list of subgroups.) 


Consider the quotient group of the group of symmetries of an 8-gon, formed with the cyclic subgroup of order 4 generated by a 
quarter-turn. Use the coset product function to determine the Cayley table for this quotient group. Use the number of 
each coset, as produced by the .cosets() method as names for the elements of the quotient group. You will need to build 
the table “by hand” as there is no easy way to have Sage's Cayley table command do this one for you. You can build a table in 
the Sage Notebook pop-up editor (shift-click on a blue line) or you might read the documentation of the html.table() 
method. 


Consider the cyclic subgroup of order 4 in the symmetries of an 8-gon. Verify that the subgroup is normal by first building the 
raw left and right cosets (without using the .cosets() method) and then checking their equality in Sage, all with a single 
command that employs sorting with the sorted() command. 


Again, use the same cyclic subgroup of order 4 in the group of symmetries of an 8-gon. Check that the subgroup is normal by 
using part (2) of Theorem 10.3. Construct a one-line command that does the complete check and returns True . Maybe sort 
the elements of the subgroup S_ first, then slowly build up the necessary lists, commands, and conditions in steps. Notice that 
this check does not require ever building the cosets. 


Repeat the demonstration from the previous subsection that for the symmetries of a tetrahedron, a cyclic subgroup of order 3 
results in an undefined coset multiplication. Above, the default setting for the .cosets() method builds right cosets — 
but in this problem, work instead with left cosets. You need to choose two cosets to multiply, and then demonstrate two choices 
for representatives that lead to different results for the product of the cosets. 


Construct some dihedral groups of order 27n (i.e. symmetries of an n-gon, D, in the text, DihedralGroup(n)_ in Sage). 
Maybe all of them for 3 < n < 100. For each dihedral group, construct a list of the orders of each of the normal subgroups (so 
use .normal_subgroups() ). You may need to wait ten or twenty seconds for this to finish - be patient. Observe enough 
examples to hypothesize a pattern to your observations, check your hypothesis against each of your examples and then state 
your hypothesis clearly. 


Can you predict how many normal subgroups there are in the dihedral group D47944g without using Sage to build all the normal 
subgroups? Can you describe all of the normal subgroups of a dihedral group in a way that would let us predict all of the 
normal subgroups of D47944g without using Sage? 
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CHAPTER OVERVIEW 


11: Homomorphisms 


One of the basic ideas of algebra is the concept of a homomorphism, a natural generalization of an isomorphism. If we relax the 
requirement that an isomorphism of groups be bijective, we have a homomorphism. 

11.1: Group Homomorphisms 

11.2: The Isomorphism Theorms 

11.3: Reading Questions 

11.4: Exercises 

11.5: Additional Exercises- Automorphisms 

11.6: Sage 

11.7: Sage Exercises 


This page titled 11: Homomorphisms is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or curated 
by Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the LibreTexts 
platform; a detailed edit history is available upon request. 


Oibretexts: 


11.1: Group Homomorphisms 

A homomorphism between groups (G, -) and (H, 0) isa map ¢: G—> H such that 
(91-92) = (1) © P(g2) 

for g1, 92 € G. The range of ¢ in H is called the homomorphic image of ¢. 


Two groups are related in the strongest possible way if they are isomorphic; however, a weaker relationship may exist between two 
groups. For example, the symmetric group S$, and the group Zz are related by the fact that S,, can be divided into even and odd 
permutations that exhibit a group structure like that Z2, as shown in the following multiplication table. 


even odd 


even | even odd 
odd | odd even 


We use homomorphisms to study relationships such as the one we have just described. 


Let G be a group and g € G. Define a map ¢: Z > G by $(n) =g”. 
Solution 


Then ¢ is a group homomorphism, since 
o(m +n) =g™™ = gg" = $(m)9(n). 


This homomorphism maps Z onto the cyclic subgroup of G generated by g. 


Let G = GL,(R). If 


is in G, 
Solution 


then the determinant is nonzero; that is, det(A)=ad—bc#0. Also, for any two elements A and B in G, 
det(AB) = det(A) det(B). Using the determinant, we can define a homomorphism ¢ : GL2(R) + R* by Ar> det(A). 


Recall that the circle group T consists of all complex numbers z such that |z| = 1. We can define a homomorphism ¢ from the 
additive group of real numbers R to T by ¢: ++ cosO+isin#. 
Solution 
Indeed, 
¢(a+fB) =cos(a+)+isin(a + 8) 
= (cosacos 6 — sina sin 8) +7(sina cos $+ cosa sin 8) 
= (cosa +isina)(cos 6 +7 sin 8) 


= o(a)9(6). 


Geometrically, we are simply wrapping the real line around the circle in a group-theoretic fashion. 


The following proposition lists some basic properties of group homomorphisms. 
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& Proposition 11.4 


Let @: G, —> G2 be a homomorphism of groups. Then 


1. If e is the identity of G1, then $(e) is the identity of Go; 
2. For any element g € G1, $(9 +) =[4(g)| 3; 
3. If H, is a subgroup of G1, then (H;) is a subgroup of G2; 
4. If Hz is a subgroup of G2, then @ 1(H2) = {g € Gi: 6(g) € Ha} isa subgroup of G:. Furthermore, if H» is normal in 
G2, then ¢-1(H2) is normal in G4. 
Proof 


(1) Suppose that e and e’ are the identities of G, and G2, respectively; then 
e' P(e) = $(e) = o(ee) = g(e)d(e). 
By cancellation, ¢(e) = e’. 


(2) This statement follows from the fact that 
9(9 *)¢(9) =4(9 *9) =4(€) =e. 


(3) The set ¢(H;) is nonempty since the identity of Gz is in @(H1). Suppose that Hj is a subgroup of G; and let x and y 
be in @(H1). There exist elements a, b € Hy such that (a) =a and ¢(b) = y. Since 


zy * = d(a)[9(b)]| * = ¢(ab*) € dF), 
@(H;) is a subgroup of G2 by Proposition 3.31. 


(4) Let H> be a subgroup of G2 and define H, to be ¢~!(H); that is, H, is the set of all g € G, such that 4(g) € Hp. 
The identity is in H, since (e) =e’. If a and b are in Hy, then (ab ') = d(a)[¢(b)| | is in Hy since Hy is a subgroup 
of Gy. Therefore, ab-! € H; and H; isa subgroup of G1. If H» is normal in G2, we must show that Ge hg € Hy for 
h € Hy andg€ G;. But 


$(g *hg) = [6(9)] *O(h)o(g) € He, 


since Hy» is a normal subgroup of G2. Therefore, g!hg € Hy. 


Let 6: G— H bea group homomorphism and suppose that e is the identity of H. By Proposition 11.4, 6! ({e}) is a subgroup 
of G. This subgroup is called the kernel of @ and will be denoted by ker ¢. In fact, this subgroup is a normal subgroup of G since 
the trivial subgroup is normal in H. We state this result in the following theorem, which says that with every homomorphism of 
groups we can naturally associate a normal subgroup. 


& Theorem 11.5 


Let 6: G— H bea group homomorphism. Then the kernel of ¢ is a normal subgroup of G. 


Y Example 11.6 
Let us examine the homomorphism ¢ : GL2(R) — R* defined by A ++ det(A). 


Solution 


Since 1 is the identity of IR*, the kernel of this homomorphism is all 2 x2 matrices having determinant one. That is, 
ker ¢ = SL(R). 


GNU Free Documentation License LD https ://math.libretexts.org/@go/page/81116 


Oibretexts: 


~ Example \11.7\) 


The kernel of the group homomorphism ¢ : R — C* 
Solution 


defined by $(6) =cos@+isin@ is {2mn: n € Z}. Notice that ker ¢ = Z. 


vY Example 11.8 


Suppose that we wish to determine all possible homomorphisms ¢ from Z7 to Zy2. 
Solution 


Since the kernel of @ must be a subgroup of Z7, there are only two possible kernels, {0} and all of Z7. The image of a 
subgroup of Z7 must be a subgroup of Z 2. Hence, there is no injective homomorphism; otherwise, Zj2 would have a 
subgroup of order 7, which is impossible. Consequently, the only possible homomorphism from Z7 to Zj is the one mapping 
all elements to zero. 


vY Example 11.9 


Let G be a group. Suppose that g € G and ¢ is the homomorphism from Z to G given by ¢(n) = g”. 
Solution 


If the order of g is infinite, then the kernel of this homomorphism is {0} since ¢@ maps Z onto the cyclic subgroup of G 
generated by g. However, if the order of g is finite, say n, then the kernel of ¢ is nZ. 


This page titled 11.1: Group Homomorphisms is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or 
curated by Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the 
LibreTexts platform; a detailed edit history is available upon request. 
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11.2: The lsomorphism Theorms 


Although it is not evident at first, factor groups correspond exactly to homomorphic images, and we can use factor groups to study 
homomorphisms. We already know that with every group homomorphism ¢ : G— H we can associate a normal subgroup of G, 
ker @. The converse is also true; that is, every normal subgroup of a group G gives rise to homomorphism of groups. 


Let H be anormal subgroup of G. Define the natural or canonical homomorphism 


¢:G3G/H 


by 


This is indeed a homomorphism, since 


$(9192) = 9192H = 9 HH = $(91) (92). 


The kernel of this homomorphism is H. The following theorems describe the relationships between group homomorphisms, 
normal subgroups, and factor groups. 


& Theorem 11.10. First lsomorphism Theorem 


If»: G— His a group homomorphism with K =ker, then K is normal in G. Let 6: G—G/K_ be the canonical 
homomorphism. Then there exists a unique isomorphism n : G/K — W(G) such that » = n@. 


Proof 


We already know that K is normal in G. Define 7: G/K > ¥(G) by n(gK) = (4g). We first show that 7 is a well- 
defined map. If g; K = g2K, then forsome k € K, g,k = g2; consequently, 


n(n K) = v(91) = (go) (k) = bok) = ¥(g92) = n(92K). 


Thus, 7 does not depend on the choice of coset representatives and the map 7: G/K — (G) is uniquely defined since 
a = nd. We must also show that 7 is a homomorphism. Indeed, 


n(n Kg2K) =n(g192K) 
= ¥(92) 
= (9) P(g2) 
=7(K)n(g2K). 


Clearly, 7 is onto ~(G). To show that 7 is one-to-one, suppose that 7(g;K) =n(goK). Then (91) =W(g2). This 
implies that (9; 192) =e, or 9,192 is in the kernel of 7; hence, 9,1 92K = Kk; thatis,g, kK =g)K. 


Mathematicians often use diagrams called commutative diagrams to describe such theorems. The following diagram “commutes” 
since wy = nd. 
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G/K 


vw Example 11.11 


Let G be a cyclic group with generator g. Define a map ¢: Z > G by n> g”. 
Solution 


This map is a surjective homomorphism since 


o(m+n) =g™"™ =g™g" = o(m)¢(n). 


Clearly ¢ is onto. If |g| =m, then g” =e. Hence, ker ¢ = mZ and Z/ ker 6 = Z/mZ = G. On the other hand, if the order 
of g is infinite, then ker ¢ = 0 and ¢ is an isomorphism of G and Z. Hence, two cyclic groups are isomorphic exactly when 
they have the same order. Up to isomorphism, the only cyclic groups are Z and Z,,. 


& Theorem 11.12 


Let H be a subgroup of a group G (not necessarily normal in G) and N a normal subgroup of G. Then HN is a subgroup of 
G, HON is anormal subgroup of H, and 


H/HAN ZHN/N. 


Proof 


We will first show that HN = {hn:h € H,n © N} is a subgroup of G. Suppose that hini, hong € HN. Since N is 
normal, (h2) tn h2 € N. So 


(hin1)(hon2) = hyho((h2) 'mhe)ne 
is in HN. The inverse of hn € HN is in HN since 
(har = pote (bane hey 


Next, we prove that HM WN is normal in H. Leth € H andne€ HNN. Then h-'nh © H since each element is in H. 
Also, h-!nh € N since N is normal in G; therefore, h'nhe HNN. 


Now define amap ¢ from H to HN/Nby h++hN. The map ¢ is onto, since any coset hnN = HN is the image of h in 
H. We also know that ¢ is a homomorphism because 


o(hh') =hh'N =ANh'N = o(h)(h). 


By the First Isomorphism Theorem, the image of ¢ is isomorphic to H/ ker @; that is, 
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Since 


HN/N = 4(H) & H/ker¢. 


ker@={he H: he N}=HNN, 
HN/N =¢(H)2£H/HON. 


& Theorem 11.13. Correspondence Theorem 


Let N be anormal subgroup of a group G. Then H ++ H/N is a one-to-one correspondence between the set of subgroups H 
of G containing N and the set of subgroups of G/N. Furthermore, the normal subgroups of G containing N correspond to 
normal subgroups of G/N. 


Proof 
Let H be a subgroup of G containing N. Since N is normal in H, H/N is a factor group. Let aN and bN be elements of 
H/N.Then (aN)(b-'N) =ab 1 N € H/N; hence, H/N isa subgroup of G/N. 


Let S be a subgroup of G/N. This subgroup is a set of cosets of N. If H={geG:gN € S}, then for hi, hz € H, we 
have that (hi N)(h2N) =hih2N € S and h,'N € S. Therefore, H must be a subgroup of G. Clearly, H contains N. 
Therefore, S = H/N. Consequently, the map H + H/N is onto. 


Suppose that H; and H> are subgroups of G containing N such that H,/N = H>/N. If hi € Ay, then hyN € H,/N. 
Hence, hi N=h2N C Hy for some hy in Hz. However, since N is contained in Hj, we know that hy € Hz or 
A, C Hp. Similarly, Hy C Hy. Since H; = Hy, the map H > H/N is one-to-one. 


Suppose that H is normal in G and N is a subgroup of H. Then it is easy to verify that the map G/N — G/H defined by 
gN +> gH is a homomorphism. The kernel of this homomorphism is H /N, which proves that H/N is normal in G/N. 
Conversely, suppose that H/N is normal in G/N. The homomorphism given by 
G/N 
Go>G/N-> ei 
H/N 


has kernel H. Hence, H must be normal in G. 


Notice that in the course of the proof of Theorem 11.13, we have also proved the following theorem. 


& Theorem \(11.14\. Third lsomorphism Theorem 


Let G be a group and N and H be normal subgroups of G with N C H. Then 


_ GIN 


G/H = ay 


vY Example 11.15 


By the Third Isomorphism Theorem, 
Z/mZ = (Z/mnZ)/(mZ/mnZ). 
Solution 


Since |Z/mnZ| = mnand |Z/mZ| =m, we have |mZ/mnZ| =n. 
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11.3: Reading Questions 


Consider the function @ : Zig Zio defined by ¢(z) =x +a. Prove that ¢ is a group homomorphism. 
For ¢ defined in the previous question, explain why ¢ is not a group isomorphism. 

Compare and contrast isomorphisms and homomorphisms. 

Paraphrase the First Isomorphism Theorem using only words. No symbols allowed at all. 


G 


For every normal subgroup there is a homomorphism, and for every homomorphism there is a normal subgroup.” Explain the 
(precise) basis for this (vague) statement. 


77H 7H 78 7B 
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11.4: Exercises 


Prove that det(AB) = det(A) det(B) for A,B©€ GL2(R). This shows that the determinant is a homomorphism from 
GL» (R) to R*. 


Which of the following maps are homomorphisms? If the map is a homomorphism, what is the kernel? 


1.6: R* + GL2(R) defined by 
2.¢:R > GL2(R) defined by 
3.6: GL2(R) — R defined by 
4.6: GL2(R) — R* defined by 
5. @: M2(R) > R defined by 
IG gies 
where M.(R) is the additive group of 2 x 2 matrices with entries in R. 
Let A be an m x n matrix. Show that matrix multiplication, 2 ++ Az, defines a homomorphism ¢ : R” > R™. 
Let d: Z — Z be given by ¢(n) =7n. Prove that ¢ is a group homomorphism. Find the kernel and the image of ¢. 


Describe all of the homomorphisms from Z4 to Zig. 


Describe all of the homomorphisms from Z to Zj9. 


E 
ce 
fe 
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In the group Zo, let H = (4) and N = (6). 


1. List the elements in HN (we usually write H+ N for these additive groups) and HON. 

2. List the cosets in HN/N, showing the elements in each coset. 

3. List the cosets in H/(HMN), showing the elements in each coset. 

4. Give the correspondence between HN /N and H/(HMWN) described in the proof of the Second Isomorphism Theorem. 


If G is an abelian group and n € N, show that 6: G—>G defined by g'> g” is a group homomorphism. 


a: 


If 6: G— Hi isa group homomorphism and G is abelian, prove that @(G) is also abelian. 


If 6: G— HH isa group homomorphism and G is cyclic, prove that ¢(G) is also cyclic. 


Show that a homomorphism defined on a cyclic group is completely determined by its action on the generator of the group. 


If a group G has exactly one subgroup A of order k, prove that H is normal in G. 


Prove or disprove: Q/Z = Q. 


Let G be a finite group and N a normal subgroup of G. If H is a subgroup of G/N, prove that @ (H) is a subgroup in G of 
order |H|-|N|, where 6: G— G/N is the canonical homomorphism. 


Let G; and Gy, be groups, and let Hy and Hy» be normal subgroups of G; and G2 respectively. Let 6: G, > G2 be a 
homomorphism. Show that ¢ induces a homomorphism ¢ : (G;/H,) > (G2/H>) if ¢(Hy) C Hy. 


If H and K are normal subgroups of G and HM K = {e}, prove that G is isomorphic to a subgroup of G/H x G/K. 


=H GB GB BB eB 


Let d: G, + G2 be a surjective group homomorphism. Let H; be a normal subgroup of G and suppose that @(H,) = Hp. 
Prove or disprove that G1 /H, = G2/ Hp. 


GNU Free Documentation License 1A 2 https ://math.libretexts.org/@go/page/81119 


Oibretexts: 


Let 6: G— H bea group homomorphism. Show that ¢ is one-to-one if and only if é-1(e) = {e}. 


Given a homomorphism ¢ : G' —> H define a relation ~ on G by a~ b if (a) = $(b) for a,b € G. Show this relation is an 
equivalence relation and describe the equivalence classes. 
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11.5: Additional Exercises- Automorphisms 


Let Aut(G) be the set of all automorphisms of G; that is, isomorphisms from G to itself. Prove this set forms a group and is a 
subgroup of the group of permutations of G; that is, Aut(G) < Sg. 


An inner automorphism of G, 
ig Gy Gy 
is defined by the map 


ig(x) = geg™', 
for g € G. Show that 7, € Aut(G). 


The set of all inner automorphisms is denoted by Inn(G). Show that Inn(G) is a subgroup of Aut(G). 
Find an automorphism of a group G that is not an inner automorphism. 


Let G be a group and i, be an inner automorphism of G,, and define a map 


G— Aut(G) 


gt Ig. 
Prove that this map is a homomorphism with image Inn(G) and kernel Z(G). Use this result to conclude that 


G/Z(G) = Im(G). 
Compute Aut(S3) and Inn(.S3). Do the same thing for D4. 
Find all of the homomorphisms ¢ : Z + Z. What is Aut(Z)? 


Find all of the automorphisms of Zg. Prove that Aut(Zg) = U(8). 


Ez 
fa 
fa 
, 
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For k € Z,, define a map d, : Z, > Z, by ato ka. Prove that ¢; is ahomomorphism. 
Prove that @; is an isomorphism if and only if k is a generator of Z,,. 
Show that every automorphism of Z,, is of the form x, where & is a generator of Zp. 


Prove that w : U(n) + Aut(Z,,) is an isomorphism, where w : k+> gg. 
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11.6: Sage 


Sage is able to create homomorphisms (and by extension, isomorphisms and automorphisms) between finite permutation groups. 
There is a limited supply of commands then available to manipulate these functions, but we can still illustrate many of the ideas in 
this chapter. 


Homomorphisms 
The principal device for creating a homomorphism is to specify the specific images of the set of generators for the domain. 
Consider cyclic groups of order 12 and 20: 

G={a'la”=e} H ={x'|z =e} 
and define a homomorphism by just defining the image of the generator of G,, and define the rest of the mapping by extending the 
mapping via the operation-preserving property of a homomorphism. 

¢:G>H, ¢(a)=2° 

= 9¢(a')=9(a)' =(2")' =2" 

The constructor PermutationGroupMorphism requires the two groups, then a list of images for each generator (in order!), 
and then will create the homomorphism. Note that we can then use the result as a function. In the example below, we first verify 


that C12 has a single generator (no surprise there), which we then send to a particular element of order 4 in the codomain. Sage 
then constructs the unique homomorphism that is consistent with this requirement. 


Note that the element c must therefore bein the kernel of phi . 


We can then compute the subgroup of the domain that is the kernel, in this case a cyclic group of order 3 inside the cyclic group of 
order 12. We can compute the image of any subgroup, but here we will build the whole homomorphic image by supplying the 
whole domain to the .image() method. Here the image is a cyclic subgroup of order 4 inside the cyclic group of order 20. 
Then we can verify the First Isomorphism Theorem. 


Here is a slightly more complicated example. The dihedral group Do is the symmetry group of a 20-gon. Inside this group is a 
subgroup that is isomorphic to the symmetry group of a 5-gon (pentagon). Is this a surprise, or is this obvious? Here is a way to 
make precise the statement “D9 contains a copy of Ds.” 


We build the domain and find its generators, so we know how many images to supply in the definition of the homomorphism. Then 
we construct the codomain, from which we will construct images. Our choice here is to send a reflection to a reflection, and a 
rotation to a rotation. But the rotations will both have order 5, and both are a rotation by 72 degrees. 


Since the kemel is trivial, rho is a one-to-one function (see Exercise 11.4.18). But more importantly, by the First Isomorphishm 
Theorem, G_ is isomorphic to the image of the homomorphism. We compute the image and check the claim. 


Just providing a list of images for the generators of the domain is no guarantee that the function will extend to a homomorphism. 
For starters, the order of each image must divide the order of the corresponding preimage. (Can you prove this?) And similarly, if 
the domain is abelian, then the image must also be abelian, so in this case the list of images should not generate a non-abelian 
subgroup. Here is an example. There are no homomorphisms from a cyclic group of order 7 to a cyclic group of order 4 (other than 
the trivial function that takes every element to the identity). To see this, consider the possible orders of the kernel, and of the two 
possibilities, see that one is impossible and the other arises with the trivial homomorphism. Unfortunately, Sage acts as if nothing is 
wrong in creating a homomorphism between these groups, but what Sage builds is useless and raises errors when you try to use it. 


Rather than creating homomorphisms ourselves, in certain situations Sage knows of the existence of natural homomorphisms and 
will create them for you. One such case is a direct product construction. Given a group G, the method 
.direct_product(H) will create the direct product Gx H. (This is not the same command as the function 
direct_product_permgroups() from before.) Not only does this command create the direct product, but it also builds 
four homomorphisms, one with domain G, one with domain H and two with domain G x H. So the output consists of five 
objects, the first being the actual group, and the remainder are homomorphisms. We will demonstrate the call here, and leave a 
more thorough investigation for the exercises. 
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11.7: Sage Exercises 


An automorphism is an isomorphism between a group and itself. The identity function (2 +> x) is always an isomorphism, 
which we consider trivial. Use Sage to construct a nontrivial automorphism of the cyclic group of order 12. Check that the 
mapping is both onto and one-to-one by computing the image and kernel and performing the proper tests on these subgroups. 
Now construct all of the possible automorphisms of the cyclic group of order 12 without any duplicates. 


The four homomorphisms created by the direct product construction are each an example of a more general construction of 
homomorphisms involving groups G, H and G x H. By using the same groups as in the example in the previous subsection, 
see if you can discover and describe these constructions with exact definitions of the four homomorphisms in general. 


Your tools for investigating a Sage group homomorphism are limited, you might take each generator of the domain and see 
what its image is. Here is an example of the type of computation you might do repeatedly. We'll investigate the second 
homomorphism. The domain is the dihedral group, and we will compute the image of the first generator. 


Consider two permutation groups. The first is the subgroup of S7 generated by (1, 2,3) and (4,5,6,7). The second is a 
subgroup of Siz generated by (1, 2, 3)(4,5,6)(7, 8,9)(10,11,12)and (1,10, 7, 4)(2,11, 8, 5)(3, 12, 9,6)Build these two 
groups and use the proper Sage command to see that they are isomorphic. Then construct a homomorphism between these two 
groups that is an isomorphism and include enough details to verify that the mapping is really an isomorphism. 


The second paragraph of this chapter informally describes a homomorphism from S,, to Z2, where the even permutations all 
map to one of the elements and the odd permutations all map to the other element. Replace S,, by S¢ and replace Z, by the 
permutation version of the cyclic subgroup of order 2, and construct a nontrivial homomorphism between these two groups. 
Evaluate your homomorphism with enough even and odd permutations to be convinced that it is correct. Then construct the 
kernel and verify that it is the group you expect. 


Hints: First, decide which elements of the group of order 2 will be associated with even permutations and which will be 
associated with odd permutations. Then examine the generators of S¢ to help decide just how to build the homomorphism. 


The dihedral group Do has several normal subgroups, as seen below. Each of these is the kernel of ahomomorphism with Doo 
as the domain. For each normal subgroup of D29 construct a homomorphism from D2 to Dgo that has the normal subgroup as 
the kernel. Include in your work verifications that you are creating the desired kernels. There is a pattern to many of these, but 
the three of order 20 will be a challenge. 
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CHAPTER OVERVIEW 


12: Matrix Groups and Symmetry 


When Felix Klein (1849-1925) accepted a chair at the University of Erlangen, he outlined in his inaugural address a program to 
classify different geometries. Central to Klein's program was the theory of groups: he considered geometry to be the study of 
properties that are left invariant under transformation groups. Groups, especially matrix groups, have now become important in the 
study of symmetry and have found applications in such disciplines as chemistry and physics. In the first part of this chapter, we will 
examine some of the classical matrix groups, such as the general linear group, the special linear group, and the orthogonal group. 
We will then use these matrix groups to investigate some of the ideas behind geometric symmetry. 

12.1: Matrix Groups 

12.2: Symmetry 

12.3: Reading Questions 

12.4: Exercises 

12.5: References and Suggested Readings 

12.6: Sage 

12.7: Sage Exercises 
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12.1: Matrix Groups 


Some Facts from Linear Algebra 


Before we study matrix groups, we must recall some basic facts from linear algebra. One of the most fundamental ideas of linear 
algebra is that of a linear transformation. A linear transformation or linear map T : R"” — R™ is a map that preserves vector 
addition and scalar multiplication; that is, for vectors x and y in R” anda scalara € R, 


T(x+y) =T(x)T(y) 
T(ay) = aT(y). 


An™m Xn matrix with entries in R represents a linear transformation from R” to R™. If we write vectors x = (x1, ++, 2n)* and 
y =(¥1,---; Yn) in R” as column matrices, then an m x n matrix 
ai1 42 Gin 
a2, = aaa Q2n 
A= 
Am1 Am2 st) Omn 


maps the vectors to R™ linearly by matrix multiplication. Observe that if a is a real number, 
A(x+y)=Ax+Ay and aAx=A(ax), 


where 


In 
We will often abbreviate the matrix A by writing (a,;). 
Conversely, if T : R” — R™ is a linear map, we can associate a matrix A with T by considering what T does to the vectors 


eS (1, 0)..340) 
(eee 


t 
&, = (G,0,ein, 1% 
We can write any vector x = (21,...,2n)! as 
1 C, + 2Q€Q +++: +7Lp€p. 


Consequently, if 


T(e1) =(a11,421,--.,@mi)’, 
T(e2) =(a12, a22,.-.,@m2)’, 
T(e,) = (Qin, Q2n,--> rs ret hae 


then 


T(x) = T(x1e1 +22€2 +::: +Zn€n) 
= x1T(e1) +22T(e2) fee +2nT (en) 


t 
n n 
= ( ) Q1kLky- ++ ) oni] 
k=1 k=1 


= Ax. 
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If we let T': R? —> R? be the map given by 

T (x1, @2) = (241 +522, —421 +322), 
the axioms that T’ must satisfy to be a linear transformation are easily verified. 
Solution 


The column vectors T'e, = (2, —4)’ and Te = (5, 3)* tell us that T' is given by the matrix 
2 
ae aaa 
4 3 


Since we are interested in groups of matrices, we need to know which matrices have multiplicative inverses. Recall that ann x n 
matrix A is invertible exactly when there exists another matrix A~! such that AA~! = A-1A = J, where 


I= 
O°O: eae “A 


is the n xn identity matrix. From linear algebra we know that A is invertible if and only if the determinant of A is nonzero. 
Sometimes an invertible matrix is said to be nonsingular. 


If A is the matrix 


then the inverse of A is 


Solution 


We are guaranteed that A~ exists, since det(A) = 2-3—5-1=1 is nonzero. 


Some other facts about determinants will also prove useful in the course of this chapter. Let A and B be n xn matrices. From 
linear algebra we have the following properties of determinants. 


e The determinant is a homomorphism into the multiplicative group of real numbers; that is, det(A.B) = (det A)(det B). 

e If A is an invertible matrix, then det(A~!) = 1/ det A. 

e If we define the transpose of a matrix A = (a,;) to be A’ = (a,;;), then det(A‘’) = det A. 

¢ Let T be the linear transformation associated with an n xn matrix A. Then T multiplies volumes by a factor of | det A]. In the 
case of R?, this means that J’ multiplies areas by | det Al. 


Linear maps, matrices, and determinants are covered in any elementary linear algebra text; however, if you have not had a course in 
linear algebra, it is a straightforward process to verify these properties directly for 2 x 2 matrices, the case with which we are most 
concerned. 


The General and Special Linear Groups 


The set of all x n invertible matrices forms a group called the general linear group. We will denote this group by GL, (R). The 
general linear group has several important subgroups. The multiplicative properties of the determinant imply that the set of 
matrices with determinant one is a subgroup of the general linear group. Stated another way, suppose that det(A)=1 and 
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det(B) =1. Then det(AB) = det(A) det(B)=1 and det(A-') =1/det A=1. This subgroup is called the special linear 
group and is denoted by SL,,(R). 


Given a2 x 2 matrix 


AG a 
c d 


the determinant of A is ad —bc. The group GL2(R) consists of those matrices in which ad — bc £ 0. The inverse of A is 


poreee: (3 2 
ad—be\-c a) 


Solution 
If A is in SL2(R), then 


PAS ah Ne 
—c a 
Geometrically, SZ» (IR) is the group that preserves the areas of parallelograms. Let 
iL il 
A= 
0 1 
be in SZ2(IR). In Figure 12.4, the unit square corresponding to the vectors x = (1,0)* and y = (0, 1)* is taken by A to the 


parallelogram with sides (1,0)! and (1, 1)*; that is, Ax = (1, 0)* and Ay = (1, 1)’. Notice that these two parallelograms have 
the same area. 


(0, 1) 


(1,0) x 
Figure 12.4. SZ2(R) acting on the unit square 


The Orthogonal Group O(n) 

Another subgroup of GL,,(R) is the orthogonal group. A matrix A is orthogonal if A~! = At. The orthogonal group consists of 
the set of all orthogonal matrices. We write O(n) for the n x n orthogonal group. We leave as an exercise the proof that O(n) is a 
subgroup of GL,,(R). 


The following matrices are orthogonal: 


Solution 


-1//2 0 1//2 
Gh aR) es Be): 1/6 -2/v6 1/Vv6 
1/V3 1/V3_ 1/3 


4/5 3/5 aro yo 
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There is a more geometric way of viewing the group O(n). The orthogonal matrices are exactly those matrices that preserve the 
length of vectors. We can define the length of a vector using the Euclidean inner product, or dot product, of two vectors. The 


Euclidean inner product of two vectors x = (21,...,%n)' andy = (y1,.--, Yn)’ is 
cal 
t w 
(x, y) =x’y = (21, 22,...,2n) . =2Yi +-+-+2nYn- 
Yn 
We define the length of a vector x = (1,...,%p)* to be 


xl] = y/ (xx) = fat t---+a8, 


Associated with the notion of the length of a vector is the idea of the distance between two vectors. We define the distance between 
two vectors x and y to be |/x—y||. We leave as an exercise the proof of the following proposition about the properties of 
Euclidean inner products. 


& Proposition 12.6 


Let x, y, and w be vectors in R” and @ € R. Then 


1. (x,y) = (y, x). 

2. (x,y +w) = (x,y) + (x, w). 

3. (aX, y) = (x, ay) = a(x, y). 

4. (x, x) > 0 with equality exactly when x = 0. 
5. If (x, y) =0 for all x in R”, then y = 0. 


The vector x = (3,4)* has length \/3? +4? =5. We can also see that the orthogonal matrix 


3/5 —4/5 

4 (3/5. ~4/ 
4/5 3/5 

preserves the length of this vector. The vector Ax = (—7/5, 24/5)* also has length 5. 


Since det(AA*) = det(Z) =1 and det(A) =det(A‘), the determinant of any orthogonal matrix is either 1 or —1. Consider the 
column vectors 


1 r=s 
brs = { 0 r#s 
is the Kronecker delta. Accordingly, column vectors of an orthogonal matrix all have length 1; and the Euclidean inner product of 


distinct column vectors is zero. Any set of vectors satisfying these properties is called an orthonormal set. Conversely, given an 
nm Xn matrix A whose columns form an orthonormal set, it follows that A~! = At. 


We say that a matrix A is distance-preserving, length-preserving, or inner product-preserving when || Ax — Ay|| = ||x—y|l, 
|| Ax|| = ||x||, or (Ax, Ay) = (x, y), respectively. The following theorem, which characterizes the orthogonal group, says that 
these notions are the same. 
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Theorem 12.8 


Let A be ann x n matrix. The following statements are equivalent. 


1. The columns of the matrix A form an orthonormal set. 
Dag Crs 

3. For vectors x and y, (Ax, Ay) = (x,y). 

4, For vectors x and y, || Ax — Ay|| = ||x —y||. 

5. For any vector x, || Ax|| = ||x||. 


Proof 


We have already shown (1) and (2) to be equivalent. 


(2) = (3). 


(3) = (2). Since 


we know that (x, (A’A —I)x) =0 for all x. Therefore, A’A—I=0 or A 1= A’. 
(3) = (4). If A is inner product-preserving, then A is distance-preserving, since 


|| Ax — Ay||? = || A(x —y)||? 
= (A(x—y), A(x—y)) 
= (x—y,x—y) 
= |lx—-yll. 
(4) = (5). If A is distance-preserving, then A is length-preserving. Letting y = 0, we have 
|| Ax|| = || Ax — Ay|| = ||x—yl] = ||x])- 


(5) = (3). We use the following identity to show that length-preserving implies inner product-preserving: 
1 
(%Y)=5 [I+ yl]? — ll)? —[ly|?7] - 
Observe that 


(Ax, Ay) = 


1 
2 
1 
= 5 [AG +y) I? = Axl? = AvP] 
1 
2 


GNU Free Documentation License as https ://math.libretexts.org/@go/page/81124 


Oibreexts: 


(sin 0, — cos 0) 


(a,b) (cos 8, sin 8) 


H 1 wv 


(a, —b) 


Figure 12.9.O(2) acting on R? 


~Y Example 12.10 


Let us examine the orthogonal group on R? a bit more closely. An element A € O(2) is determined by its action on 
e; =(1,0)* and eg = (0, 1)!. If Ae; = (a, b)*, then a? +b? =1, since the length of a vector must be preserved when it is 
multiplied by A. Since multiplication of an element of O(2) preserves length and orthogonality, Ae, = +(—b, a)’. If we 


choose Aez = (—b, a)’, then 
ae Pee pe 
oe) sind cos@ /’ 


where 0 < 6 < 27. The matrix A rotates a vector in R? counterclockwise about the origin by an angle of @ (Figure 12.9). 


If we choose Ae = (b, —a)*, then we obtain the matrix 


Be a 6b \ _ /[cos@ sin@ 
lo -a/ \sin@ —cos6/’ 


Re 1 0 
0 1 
A reflection about the horizontal axis is given by the matrix 
OK ( 0 ) 
0 -1 


and B= AC (see Figure 12.9). Thus, a reflection about a line @ is simply a reflection about the horizontal axis followed by a 
rotation. 


Here, det B = —1 and 


Two of the other matrix or matrix-related groups that we will consider are the special orthogonal group and the group of Euclidean 
motions. The special orthogonal group, SO(n), is just the intersection of O(n) and SL,,(R); that is, those elements in O(n) with 
determinant one. The Euclidean group, E(n), can be written as ordered pairs (A,x), where A is in O(n) and x is in R”. We 
define multiplication by 


(A, x)(B, y) = (AB, Ay +x). 


The identity of the group is (I, 0); the inverse of (A,x) is (A~!, —A~+x). In Exercise 12.4.6, you are asked to check that E'(n) is 
indeed a group under this operation. 


4¥ +Y 
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Figure 12.11. Translations in R? 


This page titled 12.1: Matrix Groups is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or curated 
by Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the LibreTexts 


platform; a detailed edit history is available upon request. 
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12.2: Symmetry 


An isometry or rigid motion in R” is a distance-preserving function f from R” to R”. This means that f must satisfy 


Il f(x) —f(y)Il = |lx—yll 
for all x, y € R”. It is not difficult to show that f must be a one-to-one map. By Theorem 12.8, any element in O(n) is an 
isometry on R”; however, O(n) does not include all possible isometries on R”. Translation by a vector x, Ty(x) =x+y is also 
an isometry (Figure 12.11); however, T cannot be in O(7) since it is not a linear map. 
We are mostly interested in isometries in R?. In fact, the only isometries in R? are rotations and reflections about the origin, 
translations, and combinations of the two. For example, a glide reflection is a translation followed by a reflection (Figure 12.12). In 
RR” all isometries are given in the same manner. The proof is very easy to generalize. 
+¥ t¥ 


2 


Figure 12.12.Glide reflections 


An isometry f that fixes the origin in R? is a linear transformation. In particular, f is given by an element in O(2). 


Proof 
Let f be an isometry in R? fixing the origin. We will first show that f preserves inner products. Since f(0) =0, 
|| f(x)|| = |||; therefore, 
Ilx|? —2(F(x), FY) + Il¥l?_ =F)? — 2¢F CX), F(y)) HIF IP 

= (f(x) — f(y), f(x) — Fly) 
= ||F(«) — f(y)I? 
= ||x—yIl 
= @=y,x—y) 
= ||x||? -2(x, y) + lly’. 

Consequently, 


(f(x), F(y)) = y)- 
Now let e; and eg be} (1, 0){t}| and} (0, 1){t}\text{, } | respectively. If 


X = (x1, 2) = 21e1 + 22e2, 
then 
f(x) = (f(x), f(e1)) Fler) + (F(x), Fle2)) f(e2) = 21 f(e1) + 22f (e2). 


The linearity of f easily follows. 


For any arbitrary isometry, f, Tf will fix the origin for some vector x in R?; hence, Tf (y) = Ay for some matrix A € O(2). 
Consequently, f(y) = Ay +x. Given the isometries 
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fly) =Ay+x1 
oy) = By +x, 


their composition is 
f(9ly)) = f(By + x2) = ABy + Ax, +x. 


This last computation allows us to identify the group of isometries on R? with E(2). 


Theorem 12.14 


The group of isometries on IR? is the Euclidean group, E(2). 


A symmetry group in R” is a subgroup of the group of isometries on R” that fixes a set of points X C R”. It is important to 
realize that the symmetry group of X depends both on R” and on X. For example, the symmetry group of the origin in R! is Zo, 
but the symmetry group of the origin in R? is O(2). 


The only finite symmetry groups in R? are Zp, and Dn. 


Proof 


We simply need to find all of the finite subgroups G of E(2). Any finite symmetry group G in R? must fix the origin and 
must be a finite subgroup of O(2), since translations and glide reflections have infinite order. By Example 12.10, elements 


in O(2) are either rotations of the form 
ae ee @ —siné 
sin®? cosé 


Beli feet ie a) 
a sind cosd (eee sind —cosd/)- 


Notice that det(Rg) =1, det(Ty) = —1, and Tj =I. We can divide the proof up into two cases. In the first case, all of 


or reflections of the form 


the elements in G have determinant one. In the second case, there exists at least one element in G with determinant —1. 


Case 1. 

The determinant of every element in G is one. In this case every element in G must be a rotation. Since G is finite, there is 
a smallest angle, say 9), such that the corresponding element Rg, is the smallest rotation in the positive direction. We claim 
that Rg, generates G. If not, then for some positive integer n there is an angle 6; between nO and (n +1)6. If so, then 
(n+1)@ —6; corresponds to a rotation smaller than 99, which contradicts the minimality of 6. 

Case 2: 


The group G contains a reflection T’. The kernel of the homomorphism ¢: G > {—1,1} given by At+> det(A) consists 
of elements whose determinant is 1. Therefore, |G‘/ ker | = 2. We know that the kernel is cyclic by the first case and is a 
subgroup of G of, say, order n. Hence, |G'| = 2n. The elements of G are 


Rgneee pi may Tele. coe iA Cha 
These elements satisfy the relation 
dehy Tie 


Consequently, G must be isomorphic to D,, in this case. 
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The Wallpaper Groups 


Suppose that we wish to study wallpaper patterns in the plane or crystals in three dimensions. Wallpaper patterns are simply 
repeating patterns in the plane (Figure 12.16). 


IN Wa \ a 
= ee gx ee 4 SS Lee RR wge 
IN, go 7 Gi NO NS 
VWF NVANZAN“AN 


v~ 
\ 


WY x VR NZ DN 


ra 


Figure 12.16.A wallpaper pattern in R 


The analogs of wallpaper patterns in R® are crystals, which we can think of as repeating patterns of molecules in three dimensions 
(Figure 12.17). The mathematical equivalent of a wallpaper or crystal pattern is called a lattice. 


Figure 12.17.A crystal structure in R® 


Let us examine wallpaper patterns in the plane a little more closely. Suppose that x and y are linearly independent vectors in R?; 
that is, one vector cannot be a scalar multiple of the other. A lattice of x and y is the set of all linear combinations mx+ny, 
where m and n are integers. The vectors x and y are said to be a basis for the lattice. 


Notice that a lattice can have several bases. For example, the vectors | (1,1){t} | and | (2,0){t} | have the same lattice as the vectors 


(-1, 1){t}| and | (-1, -1){t} | (Figure 12.18). However, any lattice is completely determined by a basis. Given two bases for the 
same lattice, say {x1, x2} and {y,, yz}, we can write 


Y, = 1X1 + 2X2 
Yo = 61X1+ Boxe, 


where @1, Q@2, (1, and (2 are integers. The matrix corresponding to this transformation is 

a a 

US ( : *) 

Bi Ba 

If we wish to give x; and x, in terms of y, and y2, we need only calculate U~!; that is, 
a ( . ) 7 ( . ) 
Y2 X2 

Since U has integer entries, U-! must also have integer entries; hence the determinants of both U and U~! must be integers. 
Because UU! = J, 


det(UU) = det(U) det(U*) = 1; 
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consequently, det(U) = +1. A matrix with determinant +1 and integer entries is called unimodular. For example, the matrix 


(5 2) 


is unimodular. It should be clear that there is a minimum length for vectors in a lattice. 


Figure 12.18.A lattice in R? 


We can classify lattices by studying their symmetry groups. The symmetry group of a lattice is the subgroup of /(2) that maps the 
lattice to itself. We consider two lattices in R? to be equivalent if they have the same symmetry group. Similarly, classification of 
crystals in R? is accomplished by associating a symmetry group, called a space group, with each type of crystal. Two lattices are 
considered different if their space groups are not the same. The natural question that now arises is how many space groups exist. 


A space group is composed of two parts: a translation subgroup and a point. The translation subgroup is an infinite abelian 
subgroup of the space group made up of the translational symmetries of the crystal; the point group is a finite group consisting of 
rotations and reflections of the crystal about a point. More specifically, a space group is a subgroup of G Cc E(2) whose 
translations are a set of the form {(I,t):t © L}, where L is a lattice. Space groups are, of course, infinite. Using geometric 
arguments, we can prove the following theorem (see [5] or [6]). 


Theorem 12.19 


Every translation group in R? is isomorphic to \({\mathbb Z} \times {\mathbb Z}\text{.}\ 


The point group of G is Go = {A: (A, b) € G for some b}. In particular, Go must be a subgroup of O(2). Suppose that x is a 
vector in a lattice L with space group G,, translation group H, and point group Go. For any element (A, y) in G, 


(A, y) (I, x) (A, y)' = (A, Ax+ y) (At ; —A-ty) 
=(AA?1,—-AAly+Ax+ty) 
= (I, Ax); 
hence, (J, Ax) is in the translation group of G. More specifically, Ax must be in the lattice D. It is important to note that Go is not 


usually a subgroup of the space group G; however, if T is the translation subgroup of G, then G/T’ = Gp. The proof of the 
following theorem can be found in [2], [5], or [6]. 


Theorem 12.20 


The point group in the wallpaper groups is isomorphic to Z, or D,, where n = 1, 2,3, 4, 6. 


To answer the question of how the point groups and the translation groups can be combined, we must look at the different types of 
lattices. Lattices can be classified by the structure of a single lattice cell. The possible cell shapes are parallelogram, rectangular, 
square, rhombic, and hexagonal (Figure 12.21). The wallpaper groups can now be classified according to the types of reflections 
that occur in each group: these are ordinarily reflections, glide reflections, both, or none. 
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Rectangular 


Square HS Rhombic 


Parallelogram 


U. Hexagonal 


Figure 12.21.Types of lattices in R? 


Table 12.22. The 17 wallpaper groups 


Notation and Space Groups Point Group Lattice Type Reflections or Glide Reflections? 
pl Zi parallelogram none 

p2 Zo parallelogram none 

p3 Z3 hexagonal none 

p4 Za square none 

p6 Ze hexagonal none 

pm dD, rectangular reflections 

pg Di rectangular glide reflections 
cm dD, rhombic both 

pmm D2 rectangular reflections 

pmg D2 rectangular glide reflections 
pgg D2 rectangular both 

c2mm D2 rhombic both 

p3m1, p31m D3 hexagonal both 

p4m, p4g D4 square both 

p6m De hexagonal both 


There are exactly 17 wallpaper groups. 


The 17 wallpaper groups are listed in Table 12.22. The groups p3m1 and p31m can be distinguished by whether or not all of their 
threefold centers lie on the reflection axes: those of p3m1 must, whereas those of p31m may not. Similarly, the fourfold centers of 
p4m must lie on the reflection axes whereas those of p4g need not (Figure 12.24). The complete proof of this theorem can be found 
in several of the references at the end of this chapter, including [5], [6], [10], and [11]. 
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p4m p4g 
Figure 12.24. The wallpaper groups p4m and p4g 


Historical Note 


Symmetry groups have intrigued mathematicians for a long time. Leonardo da Vinci was probably the first person to know all of 
the point groups. At the International Congress of Mathematicians in 1900, David Hilbert gave a now-famous address outlining 23 
problems to guide mathematics in the twentieth century. Hilbert's eighteenth problem asked whether or not crystallographic groups 
in n dimensions were always finite. In 1910, L. Bieberbach proved that crystallographic groups are finite in every dimension. 
Finding out how many of these groups there are in each dimension is another matter. In IR? there are 230 different space groups; in 
R* there are 4783. No one has been able to compute the number of space groups for R° and beyond. It is interesting to note that the 
crystallographic groups were found mathematically for R* before the 230 different types of crystals were actually discovered in 
nature. 


This page titled 12.2: Symmetry is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or curated by 
Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the LibreTexts 
platform; a detailed edit history is available upon request. 
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12.3: Reading Questions 


What is a nonsingular matrix? Give an example of a 2 x2 nonsingular matrix. How do you know your example is 
nonsingular? 


What is an isometry in R”? Can you give an example of an isometry in R?? 
What is an orthonormal set of vectors? 
What is the difference between the orthogonal group and the special orthogonal group? 


What is a lattice? 


7B 7B 7B :B 


This page titled 12.3: Reading Questions is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or 
curated by Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the 
LibreTexts platform; a detailed edit history is available upon request. 
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12.4: Exercises 


Prove the identity 


1 
Gy) = 5 [lle + yl? — [bl? — [ly] - 


Show that O(n) is a group. 


Prove that the following matrices are orthogonal. Are any of these matrices in SO(n)? 


f oe sea) 
1//2 1/2 
Ds ( 1/5 ae 
-2//5 1/v5 
3. 4/5 0 3/5 
—3/5 0 4/5 
0 —-1 0 
4. 1/3 2/3 -2/3 
—2/3 2/3 1/3 


D4 ya 273 


Determine the symmetry group of each of the figures in Figure 12.25. 


(b) 
Figure12.25. 


Let x, y, and w be vectors in R” and a € R. Prove each of the following properties of inner products. 


1. (x,y) = (y,x). 

2. (x, y + w) = (x,y) + (x, w). 
3. (ax, y) = (x, ay) =a(x, y). 
4. ( 


. (x, x) > 0 with equality exactly when x = 0. 


GNU Free Documentation License T7401 https ://math.libretexts.org/@go/page/81127 


Oibretexts: 


| 5. If (x, y) =0 for all x in R”, then y = 0. 


Verify that 
E(n) = {(A,x): A € O(n) andx € R"} 


is a group. 
Prove that {(2, 1), (1, 1)}and {(12, 5), (7, 3) }are bases for the same lattice. 


Let G be a subgroup of E(2) and suppose that T is the translation subgroup of G. Prove that the point group of G is 
isomorphic to G/T. 


Let A € SZ(R) and suppose that the vectors x and y form two sides of a parallelogram in R?. Prove that the area of this 
parallelogram is the same as the area of the parallelogram with sides Ax and Ay. 


UB Eo EB 


Prove that SO(n) is a normal subgroup of O(n). 


Show that any isometry f in R” is a one-to-one map. 


Prove or disprove: an element in (2) of the form (A, x), where x 0, has infinite order. 


Prove or disprove: There exists an infinite abelian subgroup of O(n). 


Let x = (a1, 22) be a point on the unit circle in R’; that is, 2? +22 =1. If A € O(2), show that Ax is also a point on the 
unit circle. 


= 
= 
= 
= 
E 


Let G be a group with a subgroup H (not necessarily normal) and a normal subgroup NV. Then G is a semidirect product of N 
by FH if 

e HAN ={\identity}; 

e HN=G. 


Show that each of the following is true. 
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1. S3 is the semidirect product of Az by H = {(1), (12)}. 
2. The quaternion group, Qg, cannot be written as a semidirect product. 
3. E(2) is the semidirect product of O(2) by H, where H consists of all translations in R?. 


Determine which of the 17 wallpaper groups preserves the symmetry of the pattern in Figure 12.16. 
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12.6: Sage 


There is no Sage material for this chapter. 
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12.7: Sage Exercises 


There are no Sage exercises for this chapter. 
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CHAPTER OVERVIEW 


13: The Structure of Groups 


The ultimate goal of group theory is to classify all groups up to isomorphism; that is, given a particular group, we should be able to 
match it up with a known group via an isomorphism. For example, we have already proved that any finite cyclic group of order n is 
isomorphic to Z,; hence, we “know” all finite cyclic groups. It is probably not reasonable to expect that we will ever know all 
groups; however, we can often classify certain types of groups or distinguish between groups in special cases. 

In this chapter we will characterize all finite abelian groups. We shall also investigate groups with sequences of subgroups. If a 
group has a sequence of subgroups, say 


G=H, > Hp1D++: >Hi > My = {e}, 


where each subgroup H; is normal in Hj,; and each of the factor groups Hj; /H; is abelian, then G is a solvable group. In 
addition to allowing us to distinguish between certain classes of groups, solvable groups turn out to be central to the study of 
solutions to polynomial equations. 

13.1: Finite Abelian Groups 

13.2: Solvable Groups 

13.3: Reading Questions 

13.4: Exercises 

13.5: Programming Exercises 

13.6: References and Suggested Readings 

13.7: Sage 

13.8: Sage Exercises 
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13.1: Finite Abelian Groups 


In our investigation of cyclic groups we found that every group of prime order was isomorphic to Z,, where p was a prime number. 
We also determined that Zmn Y= Zm xX Zn when gcd(m,n) =1. In fact, much more is true. Every finite abelian group is 
isomorphic to a direct product of cyclic groups of prime power order; that is, every finite abelian group is isomorphic to a group of 
the type 


Lye X +++ X Zen, 


where each pz, is prime (not necessarily distinct). 


First, let us examine a slight generalization of finite abelian groups. Suppose that G' is a group and let {g;} be a set of elements in 
G, where 7 is in some index set J (not necessarily finite). The smallest subgroup of G' containing all of the g;'s is the subgroup of 
G generated by the g;,'s. If this subgroup of G is in fact all of G, then G is generated by the set {g; : i € I}. In this case the g;'s 
are said to be the generators of G. If there is a finite set {g; : 1 € I} that generates G, then G is finitely generated. 


Obviously, all finite groups are finitely generated. For example, the group S3 is generated by the permutations (12) and 
(123). 


Solution 


The group Z x Z,, is an infinite group but is finitely generated by {(1, 0), (0, 1)}. 


Not all groups are finitely generated. Consider the rational numbers Q under the operation of addition. Suppose that Q is 


finitely generated with generators p1/qi,.--,Pn/@n, where each p;/q; is a fraction expressed in its lowest terms. Let p be 
some prime that does not divide any of the denominators qi,..., Qn. 
Solution 


We claim that 1/p cannot be in the subgroup of Q that is generated by p;/q,---,;Pn/@n, since p does not divide the 
denominator of any element in this subgroup. This fact is easy to see since the sum of any two generators is 


pila +p; /a; = (Pigg + 5%) / (G95): 


Proposition 13.3 


Let H be the subgroup of a group G that is generated by {g; € G:i € I}. Then h € H exactly when it is a product of the 
form 


h=g))---9:", 
where the gj,s are not necessarily distinct. 


Proof 
Let K be the set of all products of the form 9; ee 9" where the g;, s are not necessarily distinct. Certainly K is a subset 
of H. We need only show that K is a subgroup of G. If this is the case, then K = H, since H is the smallest subgroup 
containing all the g;s. 
Clearly, the set kK is closed under the group operation. Since 9° =1, the identity is in K. It remains to show that the 


inverse of an element g = oe Tee. Che ” in K must also be in K. However, 


= k Rav — fates —k 
Go a oa Pgs): 


GNU Free Documentation License i ee eI https ://math.libretexts.org/@go/page/81132 


Oibretexts: 


The reason that powers of a fixed g; may occur several times in the product is that we may have a nonabelian group. However, if 
the group is abelian, then the g;s need occur only once. For example, a product such as a~°6°a’ in an abelian group could always 
be simplified (in this case, to ab). 


Now let us restrict our attention to finite abelian groups. We can express any finite abelian group as a finite direct product of cyclic 
groups. More specifically, letting p be prime, we define a group G to be a p-group if every element in G has as its order a power of 
p. For example, both Zz x Zz and Z, are 2-groups, whereas Z7 is a 3-group. We shall prove the Fundamental Theorem of Finite 
Abelian Groups which tells us that every finite abelian group is isomorphic to a direct product of cyclic p-groups. 


Theorem 13.4. Fundamental Theorem of Finite Abelian Groups 


Every finite abelian group G is isomorphic to a direct product of cyclic groups of the form 
Lye x Zea X+++ xX Zygon 


here the p;'s are primes (not necessarily distinct). 


Suppose that we wish to classify all abelian groups of order 540 = Oa ens 

Solution 

The Fundamental Theorem of Finite Abelian Groups tells us that we have the following six possibilities. 
e Zy X Ly X Ly x Z3 x Lz X Zs; 

e Z2 X Ly x L3 x Lg x Zs; 

e Zo x Zo xX Zo7 x Zs; 

e Za X Z3 X Z3 x Z3 x Zs; 

e Za X L3 X Lg x Zs; 

e Za x Zor x Zs és 


The proof of the Fundamental Theorem of Finite Abelian Groups depends on several lemmas. 


Let G be a finite abelian group of order n. If p is a prime that divides n, then G contains an element of order p. 


Proof 


We will prove this lemma by induction. If n = 1, then there is nothing to show. Now suppose that the lemma is true for all 
groups of order k, where k <n. Furthermore, let p be a prime that divides n. 


If G has no proper nontrivial subgroups, then G' = (a), where a is any element other than the identity. By Exercise 4.5.39 
the order of G must be prime. Since p divides n, we know that p =n, and G contains p—1 elements of order p. 


Now suppose that G' contains a nontrivial proper subgroup H. Then 1 <|H| <n. If p||H|, then AH contains an element 
of order p by induction and the lemma is true. Suppose that p does not divide the order of H. Since G is abelian, it must be 
the case that H is a normal subgroup of G, and |G| =|H|-|G/H|. Consequently, p must divide |G/H|. Since 
|G/H| <|G| =n, we know that G/H contains an element aH of order p by the induction hypothesis. Thus, 


H =(aH)? =a? H, 


and a? © H but a¢ H. If |H| =r, then p and r are relatively prime, and there exist integers s and ¢ such that 
sp+tr=1. Furthermore, the order of a? must divide r, and (a?)” = (a")? = 1. 


We claim that a” has order p. We must show that a” £1. Suppose a” = 1. Then 
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Since a? € H, it must be the case that a = (a? )® € H, which is a contradiction. Therefore, a” #1 is an element of order 
pinG. 


Lemma 13.6 is a special case of Cauchy's Theorem (Theorem 15.1), which states that if G is a finite group and p a prime such that 
p divides the order of G,, then G contains a subgroup of order p. We will prove Cauchy's Theorem in Chapter 15. 


A finite abelian group is a p-group if and only if its order is a power of p. 


Proof 


If |G| =p” then by Lagrange’s theorem, then the order of any g€ G must divide p”, and therefore must be a power of p. 
Conversely, if |G] is not a power of p, then it has some other prime divisor g, so by Lemma 13.6 G has an element of 
order qg and thus is not a p-group. 


Lemma 13.8 
Let G be a finite abelian group of order n = p‘"' - -- py", where where p,,..., px are distinct primes and a1, Q2,..., Am are 
positive integers. Then G is the internal direct product of subgroups G,G,...,G,, where G is the subgroup of G 


consisting of all elements of order p; for some integer r. 


Proof 
Since G is an abelian group, we are guaranteed that G‘; is a subgroup of G fori =1,...,k. Since the identity has order 
pe = 1, we know that 1 € G;. If g € G, has order p;, then g ‘ must also have order p,. Finally, if h € G; has order p?, 
then 


(gh)? = gh hPi =1-1=1, 
where t is the maximum of r and s. 
We must show that 
G=GiG2---Gk 
and G;AG;={1} for i#J. Suppose that g, €G, is in the subgroup generated by G2,G3,...,G,y. Then 
5 ; ceo . 
91 = 9293 +++ gr for g; € Gj. Since g; has order p%, we know that g? ° =1 fori =2,3,...,k, and Gi ’k —1. Since 
the order of g; is a power of p; and gcd(p;,p5? ---p,*) =1, it must be the case that g, = 1 and the intersection of G, 
with any of the subgroups G2, G3,..., Gi, is the identity. A similar argument shows that G; 1G; = {1} fori 47. 
Next, we must show that it possible to write every g€ G as a product g;--- gz, where g; € G;. Since the order of g 
divides the order of G, we know that 


lol = pi p;? --- pe 


for some integers 6),..., By. Letting a; = |g| / pe *, the a;'s are relatively prime; hence, there exist integers b1,..., by such 
that a,b; +---+ azb, =1. Consequently, 


a,b, +: - -+aj,b;, a,b, andy 


=e = peed) 


Since 
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B 
(a;b;)p;" bilgl — e, 


g = 


it follows that grt must be in G;. Let g; = gt. Then g=91--- 9% € Gi1G2---G,. Therefore, G=G,G_---G, is an 
internal direct product of subgroups. 


If remains for us to determine the possible structure of each p;-group G; in Lemma 13.8. 


Let G be a finite abelian p-group and suppose that g € G has maximal order. Then G is isomorphic to (g) x H for some 
subgroup H of G. 


Proof 


By Lemma 13.7 we may assume that the order of G is p”. We shall induct on n. If n = 1, then G is cyclic of order p and 
must be generated by g. Suppose now that the statement of the lemma holds for all integers k with 1 <k <n and let gbe 
of maximal order in G, say |g| =p”. Then a?” =e for alla € G. Now choose h in G such that h ¢ (g), where h has the 
smallest possible order. Certainly such an h exists; otherwise, G = (g) and we are done. Let H = (h). 


We claim that (g) 1 H = {e}. It suffices to show that |H| =p. Since |h?| =|h|/p, the order of h? is smaller than the 
order of h and must be in (g) by the minimality of h; that is, h? = g” for some number r. Hence, 

(g’)?" = (hP)P”* a hp” ~ e, 
and the order of g” must be less than or equal to p™ +. Therefore, g” cannot generate (g). Notice that p must occur as a 
factor of r, say r= ps, and h? = g’ =g?*. Define a to be g *h. Then a cannot be in (g); otherwise, h would also have 
to be in (g). Also, 


=F AP = 1 =) ie =e. 
We have now formed an element a with order p such that a ¢ (g). Since h was chosen to have the smallest order of all of 
the elements that are not in (g), |H| =p. 
Now we will show that the order of gH in the factor group G/H must be the same as the order of g in G. If 
\gH| <|g|=p™, then 


m—1 


eigiy =a" ek 


hence, g must be in (g) 1 H = {e}, which contradicts the fact that the order of g is p™. Therefore, gH must have 
maximal order in G/H. By the Correspondence Theorem and our induction hypothesis, 


G/H & (gH) x K/H 


for some subgroup AK of G containing H. We claim that (g)N K={e}. If be (g)NK, then 
bH € (gH) K/H ={H} andb€ (g) NH = {e}. It follows that G = (g)K implies that G © (g) x K. 


The proof of the Fundamental Theorem of Finite Abelian Groups follows very quickly from Lemma 13.9. Suppose that G is a 
finite abelian group and let g be an element of maximal order in G. If (g) =G, then we are done; otherwise, G = Zj, x H for 
some subgroup H contained in G by the lemma. Since |H| < |G, we can apply mathematical induction. 


We now State the more general theorem for all finitely generated abelian groups. The proof of this theorem can be found in any of 
the references at the end of this chapter. 


Theorem 13.10. The Fundamental Theorem of Finitely Generated Abelian Groups 


Every finitely generated abelian group G is isomorphic to a direct product of cyclic groups of the form 


Dye X Liga X +++ X Lapn XL X+++ xD, 


where the p;'s are primes (not necessarily distinct). 
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13.2: Solvable Groups 


A subnormal series of a group G is a finite sequence of subgroups 


G=H, D Hn-1D-:: > Hi D Ay = {e}, 


where H; is a normal subgroup of H+. If each subgroup H; is normal in G, then the series is called a normal series. The length 
of a subnormal or normal series is the number of proper inclusions. 


Any series of subgroups of an abelian group is a normal series. 
Solution 
Consider the following series of groups: 


ZD9Z D 45Z D 180Z D {0}, 
Z24 D (2) D (6) D (12) D {0}. 


A subnormal series need not be a normal series. Consider the following subnormal series of the group D4: 
Dg > {(1), (1 2)(3 4), (13)(2 4), (14)(2 3)} > {(1), (12)(34)} > {C1}. 


Solution 


The subgroup {(1), (1 2)(3 4) }is not normal in D4; consequently, this series is not a normal series. 


A subnormal (normal) series {.K’;} is a refinement of a subnormal (normal) series { H;} if {H;} C {K;}. That is, each H; is one 
of the K;. 


The series 


Z >3Z >9Z>45Z >90Z > 180Z > {0} 


Solution 


is arefinement of the series 


Z > 9Z D> 45Z > 180Z > {0}. 


The best way to study a subnormal or normal series of subgroups, {H;} of G, is actually to study the factor groups H;,, /H;. We 
say that two subnormal (normal) series {H;} and {K,;} of a group G are isomorphic if there is a one-to-one correspondence 
between the collections of factor groups {.H;+1/H;} and {Kj41/K;}. 


Example 13.14 


The two normal series 


Ze60 > (3) D (15) D {0} 
Zo D (4) D (20) D {0} 


of the group Zgo are isomorphic 


Solution 


since 
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Zeo/ (3) = (20)/{0} = Zs 
(3)/(15) = (4)/(20) = Zs 
(15) /{0} = Zeo/ (4) = Za. 


A subnormal series {H;} of a group G is a composition series if all the factor groups are simple; that is, if none of the factor 
groups of the series contains a normal subgroup. A normal series { H; } of G is a principal series if all the factor groups are simple. 


The group Zo has a composition series 


with factor groups 


(15)/(30) © Zp 
(30) /{0} & Zo. 


Solution 


Since Zo is an abelian group, this series is automatically a principal series. Notice that a composition series need not be 
unique. The series 


Zo D (2) D (4) D (20) Dd {0} 


is also a composition series. 


Example 13.16 


For n > 5, the series 
Sn D An D {(1)} 
Solution 


is a composition series for S, since S,/A, = Z2 and A, is simple. 


Not every group has a composition series or a principal series. Suppose that 

{0} =o ei C2. eo .2 = 7 
is a subnormal series for the integers under addition. 
Solution 


Then H; must be of the form kZ for some k € N. In this case H, /Hp = kZ is an infinite cyclic group with many nontrivial 
proper normal subgroups. 


Although composition series need not be unique as in the case of Zgo, it turns out that any two composition series are related. The 
factor groups of the two composition series for Zgq are Z2, Z2, Z3, and Zs; that is, the two composition series are isomorphic. The 
Jordan-H6lder Theorem says that this is always the case. 


Theorem 13.18. Jordan-Hélder 


Any two composition series of G' are isomorphic. 


Proof 
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We shall employ mathematical induction on the length of the composition series. If the length of a composition series is 1, 
then G must be a simple group. In this case any two composition series are isomorphic. 


Suppose now that the theorem is true for all groups having a composition series of length k, where 1 <k <n. Let 


G= 4H, D Hy1D-:: D Hi D Hy = fe} 
G=Kn D Km-1 D-:: D Ki D Ko = {e} 


be two composition series for G. We can form two new subnormal series for G since Hj; Km_—1 is normal in 
Aiy4 0 Km—1 and Kj Hy-1 is normal in Ky... An-1: 


(CP 18k Sileh oy SUE aie a) Diode Duel EG, ogy EY 
Ge he a> Ke a Ge = =) lal et ie he 


Since H; 1 K,,_1 is normal in H;,; 1 Ky_1, the Second Isomorphism Theorem (Theorem 11.12) implies that 


CH G1) (Ee) = IG 1) CE a) 
~ Ay (Ai O Km-1)/Hi, 


where H; is normal in H;(Hii1 O Km—1). Since {H;} is a composition series, Hj: /H; must be simple; consequently, 
Ai; (Hiza 0 Km_1)/H; is either Hj41/H; or H;/H;. That is, H;(Hix1 OQ Kms) must be either H; or H;,;. Removing 
any nonproper inclusions from the series 


Hy, 1. 4H, iN Kp 1 D+: DApN Km. = {fe}, 


we have a composition series for H,-;. Our induction hypothesis says that this series must be equivalent to the 
composition series 


Ayn+1D--: DH, D> Hy = {e}. 


Hence, the composition series 


G=H, > Hy-1 D--: D MW D Ky = {e} 
and 


G=H, > Hn-1 D Hn-10 Km_-1 D+: D Ho Km-1 = {e} 


are equivalent. If H,-1 = K,,-1, then the composition series {H;} and {.K;} are equivalent and we are done; otherwise, 
H,-1Km_1 is a normal subgroup of G properly containing H,,_;. In this case H, 1K», =G and we can apply the 
Second Isomorphism Theorem once again; that is, 


Kn 1/(Kin 1A 1) = (A, 1Km 1)/ Hn 1=G/H,-1. 


Therefore, 


G= 4H, > Bn D BniNKm-1 D:++D Aon Km-1 = {e} 
and 


G=Ky, D Km-1 D Km-104Hn 1D:°::D KoN An-1 = fe} 


are equivalent and the proof of the theorem is complete. 


A group G is solvable if it has a subnormal series {H;} such that all of the factor groups H+; /H; are abelian. Solvable groups 
will play a fundamental role when we study Galois theory and the solution of polynomial equations. 


Example 13.19 


The group S4 is solvable since 
SD Aa > {(1), (12)(3-4), (13)(24), (14)(23)} > {(1)} 


has abelian factor groups; 
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Solution 


however, for n > 5 the series 
Sn D An D {(1)} 


is a composition series for S,, with a nonabelian factor group. Therefore, S,, is not a solvable group for n > 5. 


This page titled 13.2: Solvable Groups is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or curated 
by Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the LibreTexts 
platform; a detailed edit history is available upon request. 


GNU Free Documentation License 13.2.4 https ://math.libretexts.org/@go/page/81133 


Oibretexts: 


13.3: Reading Questions 


How many abelian groups are there of order 200 = 2°57? 

How many abelian groups are there of order 729 = 3°? 

Find a subgroup of order 6 in Zg x Z3 x Z3. 

It can be shown that an abelian group of order 72 contains a subgroup of order 8. What are the possibilities for this subgroup? 


What is a principal series of the group G? Your answer should not use new terms defined in this chapter. 


7B 7B :B :B 
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13.4: Exercises 


Find all of the abelian groups of order less than or equal to 40 up to isomorphism. 
Find all of the abelian groups of order 200 up to isomorphism. 


Find all of the abelian groups of order 720 up to isomorphism. 


Find all of the composition series for each of the following groups. 
1. Z12 
2 Zag 
3. The quaternions, Qs 
4. D4 
5. $3 x Za 
6. S4 
Teter 2 8) 
8.Q 


Show that the infinite direct product G = Z x Zz x--- is not finitely generated. 


Let G be an abelian group of order m. If n divides m, prove that G has a subgroup of order n. 


A group G is a torsion group if every element of G has finite order. Prove that a finitely generated abelian torsion group must 
be finite. 


Let G, H, and K be finitely generated abelian groups. Show that if Gx HYGx K, then H = K. Give a counterexample 
to show that this cannot be true in general. 


Let G and H be solvable groups. Show that G x H is also solvable. 


P 
© 
E 
E 
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If G has a composition (principal) series and if N is a proper normal subgroup of G, show there exists a composition 
(principal) series containing NV. 


Prove or disprove: Let N be a normal subgroup of G. If N and G/N have composition series, then G must also have a 
composition series. 


Let N be a normal subgroup of G. If N and G/N are solvable groups, show that G is also a solvable group. 


Prove that G is a solvable group if and only if G has a series of subgroups 


GSP, > P41 5° > Pj > Po ={e} 


where P, is normal in P;;1 and the order of P,,; /P; is prime. 


Let G be a solvable group. Prove that any subgroup of G is also solvable. 


Let G be a solvable group and N a normal subgroup of G. Prove that G'/N is solvable. 


Prove that D,, is solvable for all integers n. 


Suppose that G has a composition series. If N is a normal subgroup of G, show that N and G/N also have composition 
series. 


Let G be a cyclic p-group with subgroups H and K. Prove that either H is contained in K or K is contained in H. 


Suppose that G is a solvable group with order n > 2. Show that G contains a normal nontrivial abelian subgroup. 


Recall that the commutator subgroup G’ of a group G is defined as the subgroup of G generated by elements of the form 
a~'b-‘ab for a,b € G. We can define a series of subgroups of G by G) = G, GY =G', and GQ") = (Gy. 


1. Prove that G4) is normal in (G™)’. The series of subgroups 


GM=@ GH > G@>... 


: 
= 
: 
os 
& 
E 
: 
fa 
ce 
; 
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is called the derived series of G. 


2. Show that G is solvable if and only if G() = {e} for some integer n. 


Suppose that G is a solvable group with order n > 2. Show that G contains a normal nontrivial abelian factor group. 


Zassenhaus Lemma 


Let H and K be subgroups of a group G. Suppose also that H* and K™* are normal subgroups of H and K respectively. Then 


1. H*(H1 K*) is anormal subgroup of H*(HNM K). 
2. K*(H* 1K) is anormal subgroup of K*(H K). 
3. H* (HO K)/H* (HO K*) =] K* (AO 4K)/K*(A* OK) & (AN K)/(A* 0 K)(ANK*). 


Schreier's Theorem 


Use the Zassenhaus Lemma to prove that two subnormal (normal) series of a group G have isomorphic refinements. 


Use Schreier's Theorem to prove the Jordan-H6élder Theorem. 
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13.5: Programming Exercises 


Write a program that will compute all possible abelian groups of order n. What is the largest n for which your program will 
work? 


This page titled 13.5: Programming Exercises is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or 
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13.7: Sage 


Cyclic groups, and direct products of cyclic groups, are implemented in Sage as permutation groups. However, these groups 
quickly become very unwieldly representations and it should be easier to work with finite abelian groups in Sage. So we will 
postpone any specifics for this chapter until that happens. However, now that we understand the notion of isomorphic groups and 
the structure of finite abelian groups, we can return to our quest to classify all of the groups with order less than 16. 


Classification of Finite Groups 


It does not take any sophisticated tools to understand groups of order 2p, where p is an odd prime. There are two possibilities — a 
cyclic group of order 2p and the dihedral group of order 2p that is the set of symmetries of a regular p-gon. The proof requires 
some close, tight reasoning, but the required theorems are generally just concern orders of elements, Lagrange's Theorem and 
cosets. See Exercise 9.4.55. This takes care of orders n = 6, 10, 14. 


For n = 9, the upcoming Corollary 14.16 will tell us that any group of order p? (where p is a prime) is abelian. So we know from 
this section that the only two possibilities are Zg and Z3 x Z3. Similarly, the upcoming Theorem 15.10 will tell us that every group 
of order n = 15 is abelian. Now this leaves just one possibility for this order: Z3 x Zs = Zs. 


We have just two orders left to analyze: n = 8 and n = 12. The possibilities are groups we already know, with one exception. 
However, the analysis that these are the only possibilities is more complicated, and will not be pursued now, nor in the next few 
chapters. Notice that n = 16 is more complicated still, with 14 different possibilities (which explains why we stopped here). 


For n = 8 there are 3 abelian groups, and the two non-abelian groups are the dihedral group (symmetries of a square) and the 
quaternions. 


For n = 12 there are 2 abelian groups, and 3 non-abelian groups. We know two of the non-abelian groups as a dihedral group, and 
the alternating group on 4 symbols (which is also the symmetries of a tetrahedron). The third non-abelian group is an example of a 
“dicyclic” group, which is an infinite family of groups, each with order divisible by 4. The order 12 dicyclic group can also be 
constructed as a “semi-direct product” of two cyclic groups — this is a construction worth knowing as you pursue further study of 
group theory. The order 8 dicyclic group is also the quaternions and more generally, the dicyclic groups of order 2", k > 2 are 
known as “generalized quaternion groups.” 


The following examples will show you how to construct some of these groups, while also exercising a few of the commands and 
allowing us to be more certain the following table is accurate. 


Groups of Small Order as Permutation Groups 


We list here constructions, as permutation groups in Sage, for all of the groups of order less than 16. 
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Table 13.20. The Groups of Order 16 or Less in Sage 


Order Construction Notes, Alternatives 

1 CyclicPermutationGroup(1) Trivial 

2 CyclicPermutationGroup(2) SymmetricGroup(2) 

3 CyclicPermutationGroup(3) Prime order 

4 CyclicPermutationGroup(4) Cyclic 

4 KleinFourGroup( ) Abelian, non-cyclic 

5 CyclicPermutationGroup(5) Prime order 

6 CyclicPermutationGroup(6) Cyclic 

6 SymmetricGroup(3) Non-abelian 

DihedralGroup(3) 

7 CyclicPermutationGroup(7) Prime order 

8 CyclicPermutationGroup(8) Cyclic 

8 C2=CyclicPermutationGroup(2) 
C4=CyclicPermutationGroup(4) 
G=direct_product_permgroups([C2, Cbelian, non-cyclic 

8 C2=CyclicPermutationGroup(2) 
G=direct_product_permgroups( [C2, Gvbelia, non-cyclic 

8 DihedralGroup(4) Non-abelian 

8 QuaternionGroup() Quaternions 

DiCyclicGroup(2) 

9 CyclicPermutationGroup(9) Cyclic 

@) C3=CyclicPermutationGroup(3) 
G=direct_product_permgroups([C3, C¥belian, non-cyclic 

10 CyclicPermutationGroup(10) Cyclic 

10 DihedralGroup(5) Non-abelian 

11 CyclicPermutationGroup(11) Prime order 

12 CyclicPermutationGroup(12) Cyclic 

12 C2=CyclicPermutationGroup(2) 
C6=CyclicPermutationGroup(6) 
G=direct_product_permgroups([C2, C&ébelian, non-cyclic 

12 DihedralGroup(6) Non-abelian 

12 AlternatingGroup(4) Non-abelian 

Symmetries of tetrahedron 
12 DiCyclicGroup(3) Non-abelian 
Semi-direct product 23 * Z4 
ils} CyclicPermutationGroup(13) Prime order 
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CyclicPermutationGroup(14) Cyclic 


DihedralGroup(7) Non-abelian 


CyclicPermutationGroup(15) Cyclic 


This page titled 13.7: Sage is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or curated by Thomas 
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13.8: Sage Exercises 


There are no Sage exercises for this chapter. 
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CHAPTER OVERVIEW 


14: Group Actions 
Group actions generalize group multiplication. If G is a group and X is an arbitrary set, a group action of an element g € G and 
xz € X isa product, gz, living in X. Many problems in algebra are best be attacked via group actions. For example, the proofs of 
the Sylow theorems and of Burnside's Counting Theorem are most easily understood when they are formulated in terms of group 
actions. 

14.1: Groups Acting on Sets 

14.2: The Class Equation 

14.3: Burnside's Counting Theorem 

14.4: Reading Questions 

14.5: Exercises 

14.6: Programming Exercise 

14.7: References and Suggested Reading 

14.8: Sage 

14.9: Sage Exercises 
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14.1: Groups Acting on Sets 
Let X be a set and G be a group. A (left) action of G on X is a map G x X + X given by (g,z) +> gx, where 


l.ex =a forallaz € X; 
2. (g1g2)@ = gi(g2x) for all z € X and all gi, g2 € G. 


Under these considerations X is called a G-set. Notice that we are not requiring X to be related to G in any way. It is true that 
every group G acts on every set X by the trivial action (g, 2) +» x; however, group actions are more interesting if the set X is 
somehow related to the group G. 


Example 14.1 


Let G = GL2(R) and X = R?. 
Solution 


Then G acts on X by left multiplication. If v € R? and J is the identity matrix, then fu =v. If A and B are 2 x 2 invertible 
matrices, then (AB)v = A(Bv) since matrix multiplication is associative. 


Example 14.2 


Let G = D, be the symmetry group of a square. If X = {1, 2,3, 4} is the set of vertices of the square, then we can consider 
Dz, to consist of the following permutations: 


{(1), (13), (24), (1432), (1234), (12)(3 4), (14)(23), (13)(24)}. 


Solution 


The elements of D4 act on X as functions. The permutation (1 3)(2 4) acts on vertex 1 by sending it to vertex 3, on vertex 2 
by sending it to vertex 4, and so on. It is easy to see that the axioms of a group action are satisfied. 


In general, if X is any set and G is a subgroup of S‘x, the group of all permutations acting on X, then X is a G-set under the group 
action 
(7,2) + o(z) 


fora€ GandzeE X. 


Example 14.3 


If we let X = G, then every group G acts on itself by the left regular representation; that is, (g, 7) > A(x) = ga, where A, 
is left multiplication: 


e-r=A,2=exr=2 
(gh)-@ =Agnz =AgAnwe =A,(ha) =g- (h- 2). 


Solution 


If H is a subgroup of G, then G is an H-set under left multiplication by elements of H. 


Example 14.4 


Let G be a group and suppose that X = G. If H is a subgroup of G, then G is an H-set under conjugation; that is, we can 
define an action of H on G, 


HAxGG, 


via 


(h, g) > hgh! 
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forh € H andgeG. 
Solution 
Clearly, the first axiom for a group action holds. Observing that 
(hi ho, g) = hihog(hih2) * 
=hy(hogh,*)hy* 
= (hi, (h2,9)), 


we see that the second condition is also satisfied. 


Example 14.5 


Let H be a subgroup of G and Ly the set of left cosets of H. The set Ly is a G-set under the action 
(9,cH) > grH. 

Solution 

Again, it is easy to see that the first axiom is true. Since (gg’)aH = g(g’xH), the second axiom is also true. 


If G acts on a set X and z, y € X, then z is said to be G-equivalent to y if there exists a g<€ G such that gr = y. We write 
z~gyorz ~y if two elements are G-equivalent. 


Proposition 14.6 


Let X be a G-set. Then G-equivalence is an equivalence relation on X. 


Proof 


The relation ~ is reflexive since ex = x. Suppose that x ~ y for z, y © X. Then there exists a g such that gz = y. In this 
case g !y = 2; hence, y ~ z. To show that the relation is transitive, suppose that z ~ y and y ~ z. Then there must exist 
group elements g and h such that gz = y and hy = z. Soz=hy = (hg)z, and a is equivalent to z. 


If X is a G-set, then each partition of X associated with G-equivalence is called an orbit of X under G. We will denote the orbit 
that contains an element x of X by O,. 


Example 14.7 


Let G be the permutation group defined by 

G = {(1), (123), (13 2), (45), (123)(45), (132)(45)} 
and X = {1,2,3,4,5}. 
Solution 


Then X is a G-set. The orbits are O; = O2 = O3 = {1, 2,3} and O, =O; = {4,5}. 


Now suppose that G is a group acting on a set X and let g be an element of G. The fixed point set of g in X, denoted by Xg, is the 
set of all « € X such that gz = x. We can also study the group elements g that fix a given x € X. This set is more than a subset of 
G, it is a subgroup. This subgroup is called the stabilizer subgroup or isotropy subgroup of x. We will denote the stabilizer 
subgroup of x by G,. 


Remark 14.8 


The ideal gas law is easy to remember and apply in solving problems, as long as you get the proper values a 
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Example 14.9 


Let X = {1, 2,3,4,5, 6}and suppose that G is the permutation group given by the permutations 
{(1), (1 2)(3 45 6), (35)(46), (1 2)(3 65 4)}. 
Solution 
Then the fixed point sets of X under the action of G are 
24 So 
X (3 5)(46) = {1, 2}, 

X (1 2)(3456)= X(12)(3654)= 9, 

and the stabilizer subgroups are 
Gi = G2 = {(1), (35)(46)}, 
G3 =G4=Gs5 =Ge5 = {(1)}. 


It is easily seen that G, is a subgroup of G for each x € X. 


Proposition 14.10 


Let G be a group acting on a set X and x € X. The stabilizer group of x, Gz, is a subgroup of G. 


Proof 


Clearly, e€ G, since the identity fixes every element in the set X. Let gh © G,. Then gr =x and ha=«az. So 
(gh)x = g(ha) = gx =a; hence, the product of two elements in G, is also in G,. Finally, if g€@G,, then 
z=ex=(g'g)x=(g')gz =g ‘2. SogisinG,. 


We will denote the number of elements in the fixed point set of an element g € G by |.X,| and denote the number of elements in 


the orbit of « € X by |O,|. The next theorem demonstrates the relationship between orbits of an element « € X and the left cosets 
of G, inG. 


Theorem 14.11 


Let G be a finite group and X a finite G-set. If x € X, then |O,| =[G: G,]. 
Proof 


We know that |G|/|G,| is the number of left cosets of G, in G by Lagrange's Theorem (Theorem 6.10). We will define a 
bijective map ¢ between the orbit O, of X and the set of left cosets Lg, of G, in G. Let y € O,. Then there exists a g in 
G such that gz = y. Define ¢ by ¢(y) = gGz. To show that ¢ is one-to-one, assume that (y1) = ¢(y2). Then 


(y1) = 91Gr = 92Ge = b(y2); 


where giz = y; and got = yp. Since 9G, = g2Gz, there exists ag € G, such that g2 = gig, 


Y2 = gat = gigt = Mr —Y1; 


consequently, the map ¢ is one-to-one. Finally, we must show that the map ¢ is onto. Let gG, be a left coset. If gr = y, 
then $(y) = 9G. 
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14.2: The Class Equation 
Let X be a finite G-set and Xq be the set of fixed points in X; that is, 
X¢ ={« €X: gr =z forall g € G}. 


Since the orbits of the action partition X, 


’ 


|X| =|Xel + 2 102, 
i=k 


where 2, ..., Zp are representatives from the distinct nontrivial orbits of X. 


Now consider the special case in which G acts on itself by conjugation, (g,z) + gzg~!. The center of G, 
Z(G) = {«: 2g = ge for all g € G}, 


is the set of points that are fixed by conjugation. The nontrivial orbits of the action are called the conjugacy classes of G. If 
£1,..., XL, are representatives from each of the nontrivial conjugacy classes of G and |O,,| =71,..., |Oz,| =x, then 


|G| =|2(G)| +m +--+ + ne. 


The stabilizer subgroups of each of the x;'s, C(x;) = {g € G: gx; = x;4g}, are called the centralizer subgroups of the «;'s. From 
Theorem 14.11, we obtain the class equation: 


|G] =|Z(G)| + [G: C(a1)] +--+ +[G: C(ax)]. 


One of the consequences of the class equation is that the order of each conjugacy class must divide the order of G. 


Example 14.12 


It is easy to check that the conjugacy classes in S3 are the following: 
{(1)}, {(23),(132)}, {(12), (13), (23)}. 
Solution 


The class equation is6 = 1+4+2+3. 


Example 14.13 


The center of D4 is {(1), (13)(24)},and the conjugacy classes are 
{(13),(24)}, {(1432),(1234)}, {(12)(34), (14)(23)}. 


Solution 


Thus, the class equation for D4 is 8 =2+2+2+42. 


Example 14.14 


For S;, it takes a bit of work to find the conjugacy classes. We begin with cycles. Suppose that o = (a1,...,@) is a cycle and 
letr € S,. 


Solution 


By Theorem 6.16, 


Tar * =(r(a1),---,7(a;))- 


Consequently, any two cycles of the same length are conjugate. Now let o = 0102---0, be a cycle decomposition, where the 
length of each cycle o; is r;. Then o is conjugate to every other 7 € S,, whose cycle decomposition has the same lengths. 
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The number of conjugate classes in S,, is the number of ways in which n can be partitioned into sums of positive integers. In 
the case of $3 for example, we can partition the integer 3 into the following three sums: 


3 =1+1+4+1 
3 =142 
3) == 0 


therefore, there are three conjugacy classes. There are variations to problem of finding the number of such partitions for any 
positive integer n that are what computer scientists call NP-complete. This effectively means that the problem cannot be 
solved for a large n because the computations would be too time-consuming for even the largest computer. 


Theorem 14.15 


Let G be a group of order p” where p is prime. Then G has a nontrivial center. 
Proof 
We apply the class equation 
|G| =|Z(G)| +n. +--+ + ng. 


Since each n; > 1 and n; | |GI, it follows that p must divide each n;. Also, p| |G|; hence, p must divide |Z(G)|. Since 
the identity is always in the center of G, |Z(G)| > 1. Therefore, |Z(G)| > p, and there exists some g € Z(G) such that 
g# 1. 


Corollary 14.16 


Let G be a group of order p* where p is prime. Then G is abelian. 


Proof 


By Theorem 14.15 |Z(G)| =p or p’. Suppose that |Z(G)| =p. Then Z(G) and G/Z(G) both have order p and must 
both be cyclic groups. Choosing a generator aZ(G) for G/Z(G), we can write any element gZ(G) in the quotient group 
as a” Z(G) for some integer m; hence, g=a™a for some x in the center of G. Similarly, if hZ(G) € G/Z(G), there 
exists a y in Z(G) such that h =a”y for some integer n. Since x and y are in the center of G, they commute with all 
other elements of G; therefore, 


gh =a™xa"y =a™' "zy =a" ya” x = hg, 


and G must be abelian. Hence, |Z(G)| = p?. 
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14.3: Burnside's Counting Theorem 


Suppose that we wish to color the vertices of a square with two different colors, say black and white. We might suspect that there 
would be 2* = 16 different colorings. However, some of these colorings are equivalent. If we color the first vertex black and the 
remaining vertices white, it is the same as coloring the second vertex black and the remaining ones white since we could obtain the 
second coloring simply by rotating the square 90° (Figure 14.17). 


B W W B 
W W W W 
W W W W 
B W W B 


Burnside's Counting Theorem offers a method of computing the number of distinguishable ways in which something can be done. 
In addition to its geometric applications, the theorem has interesting applications to areas in switching theory and chemistry. The 
proof of Burnside's Counting Theorem depends on the following lemma. 


Lemma 14.18 


Let X be a G-set and suppose that x ~ y. Then G, is isomorphic to Gy. In particular, |G,| = |Gy]|. 


Proof 
Let G act on X by (g,z) > g-a. Since x ~ y, there exists ag € G such that g- =y. Leta € Gy. Since 
gag” -y=ga-g 'y=ga-2=g-2=y, 
we can define a map ¢: G, —> Gy by ¢(a) = gag~!. The map ¢ is a homomorphism since 
(ab) = gabg~' = gag™' gbg* = (a) (8). 


Suppose that ¢(a) = ¢(b). Then gag’ = gbg-! or a=b; hence, the map is injective. To show that ¢ is onto, let b be in 
G,; then g ‘bg is in G, since 


=il =il =i =i 
g bg-x=g b-gr=g b-y=g -y=2; 


and ¢(g-1bg) =b. 
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Theorem 14.19. Burnside 


Let G be a finite group acting on a set X and let k denote the number of orbits of X. Then 


Proof 


We look at all the fixed points x of all the elements in g € G; that is, we look at all g's and all x's such that gx = a. If 
viewed in terms of fixed point sets, the number of all g's fixing z's is 


d/l: 
geEG 

However, if viewed in terms of the stabilizer subgroups, this number is 
SS IGz\; 
reX 


hence, >> <q |Xg| = Yonex |Gz|- By Lemma 14.18 


on IGy| =|0,|-|Gz. 


yeO, 


geG 


By Theorem 14.11 and Lagrange's Theorem, this expression is equal to |G. Summing over all of the k distinct orbits, we 
conclude that 


2M |=) 1G2| =&- |G. 


TEX 


Example 14.20 


Let X = {1, 2, 3,4, 5} and suppose that G is the permutation group G = {(1), (13), (13)(25), (25)}. 
Solution 


The orbits of X are {1,3}, {2,5},and {4}. The fixed point sets are 


{4} 


X(1) = 

Xa) = aoe 
P= 
25) = {1,3, 4}. 


“Ko 


Burnside's Theorem says that 


1 
k= IX=5 (5+34143)=3. 


A Geometric Example 


Before we apply Burnside's Theorem to switching-theory problems, let us examine the number of ways in which the vertices of a 
square can be colored black or white. Notice that we can sometimes obtain equivalent colorings by simply applying a rigid motion 
to the square. For instance, as we have pointed out, if we color one of the vertices black and the remaining three white, it does not 
matter which vertex was colored black since a rotation will give an equivalent coloring. 


The symmetry group of a square, Dy, is given by the following permutations: 


(1) (13) (24) (1432) 
(1234) (12)(34) (14)(23) = (13)(24) 
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The group G acts on the set of vertices {1, 2, 3, 4}in the usual manner. We can describe the different colorings by mappings from 
X into Y = {B, W} where B and W represent the colors black and white, respectively. Each map f : X + Y describes a way to 
color the corners of the square. Every o € D4 induces a permutation & of the possible colorings given by o(f)=foo for 
f :X- Y. For example, suppose that f is defined by 


is 
f(2) =W 
yaw 
i= W 


and o = (12)(34). Then o(f) = foo sends vertex 2 to B and the remaining vertices to W. The set of all such & is a permutation 
group G on the set of possible colorings. Let X denote the set of all possible colorings; that is, X is the set of all possible maps 
from X to Y. Now we must compute the number of G-equivalence classes. 


pee a) = X since the identity fixes every possible coloring. | X | =2* = 16. 


ax (1234) consists of all f € X such that f is unchanged by the permutation (1 2 3 4). In this case 
f(1) = f(2) = f (3) = f(A), so that all values of f must be the same; that is, either f(z) = B or f(x) = W for every vertex x 


of the square. So |X 234)| = 2. 


3. X 1432) = 2. 

4. For X (1 3)(2 4) f(1) = f(3) and f(2) = f(4). Thus, |X a3)24| = 2? =4. 

5. |X 12)(34)| = 4, 

6. x 14)(2 3) =4, 

7, For Xa 3), f(1) = f(3) and the other corners can be of any color; hence, [Xa 3)| = 23 =8. 
8. |X 24)| =8 


By Burnside's Theorem, we can conclude that there are exactly 


1 
gih Ft +2? +2! +2? +2? +2? +2") =6 


ways to color the vertices of the square. 


Proposition 14.21 


Let G be a permutation group of X and X the set of functions from X to Y. Then there exists a permutation group é acting 
on X , where & € G is defined by &(f) = foo foro € Gand f € X. Furthermore, if n is the number of cycles in the cycle 
decomposition of a, then |X | =|Y|”. 

Proof 


Let o€G and fe Xe Clearly, foo is also in Be Suppose that g is another function from X to Y such that 
o(f) =a(g). Then for each € X, 


f(o(@)) = a(f)(@) = a(g)(«) = g(o(@)). 


Since o is a permutation of X, every element x’ in X is the image of some x in X under o; hence, f and g agree on all 
elements of X. Therefore, f = g anda is injective. The map o +> @ is onto, since the two sets are the same size. 


Suppose that o is a permutation of X with cycle decomposition 0 =0102---on. Any f in X , must have the same value 
on each cycle of o. Since there are n cycles and |Y| possible values for each cycle, |X ,| = |Y|". 


Example 14.22 


Let X={1,2,...,7} and suppose that Y={A,B,C}. If g is the permutation of X given by 
(13)(245) = (13)(245)(6)(7), 


Solution 
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| thenn=4. Any f € X. g must have the same value on each cycle in g. There are |Y| =3 such choices for any value, so 
|X| =34 =81. 


Example 14.23 


Suppose that we wish to color the vertices of a square using four different colors. By Proposition 14.21, we can immediately 
decide that there are 


Solution 
1 
ae +41 442441442447 +43 4 43) =55 


possible ways. 


Switching Functions 


In switching theory we are concerned with the design of electronic circuits with binary inputs and outputs. The simplest of these 
circuits is a switching function that has n inputs and a single output (Figure 14.24). Large electronic circuits can often be 
constructed by combining smaller modules of this kind. The inherent problem here is that even for a simple circuit a large number 
of different switching functions can be constructed. With only four inputs and a single output, we can construct 65,536 different 
switching functions. However, we can often replace one switching function with another merely by permuting the input leads to the 
circuit (Figure 14.25). 


Ly 
X2 


i F Big Wasa 58n) 


ee 


Figure 14.24. A switching function of n variables 


We define a switching or Boolean function of n variables to be a function from Z5 to Zz. Since any switching function can have 
two possible values for each binary n-tuple and there are 2” binary n-tuples, al switching functions are possible for n variables. 
In general, allowing permutations of the inputs greatly reduces the number of different kinds of modules that are needed to build a 
large circuit. 


oT > f(a,b ‘ > f(b,a) = g(a,b 
LF RG XX Fp Hba)= (0,0) 


\(Figure \text { } 14.25. A switching function of two variables 


The possible switching functions with two input variables a and b are listed in Table 14.26. Two switching functions f and g are 
equivalent if g can be obtained from f by a permutation of the input variables. For example, g(a, b, c) = f(b, c,a). In this case 
g~f via the permutation (a, c, b). In the case of switching functions of two variables, the permutation (a, b) reduces 16 possible 
switching functions to 12 equivalent functions since 


fa ~ fa 
fs ~ fs 
fio ~ fiz 
fu ~ fis- 


\(Table \text { } 14.26\). Switching functions in two variables 


Inputs Outputs 
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fo fi fo fs Sa fs fe fr 
0 0 0 0 0 0 0 0 0 0 
0 1 0 0 0 0 1 1 1 1 
1 0 0 0 1 1 0 0 1 1 
1 1 0 1 0 1 0 1 0 1 
Inputs Outputs 

fs fo fio fu fiz fis fia fis 
0 0 1 1 1 1 1 1 1 1 
0 1 0 0 0 0 1 1 1 1 
1 0 0 0 1 1 0 0 1 1 
1 1 0 1 0 1 0 1 0 1 


For three input variables there are 27° = 256 possible switching functions; in the case of four variables there are 2” = 65,536. 
The number of equivalence classes is too large to reasonably calculate directly. It is necessary to employ Burnside's Theorem. 


Consider a switching function with three possible inputs, a, b, and c. As we have mentioned, two switching functions f and g are 
equivalent if a permutation of the input variables of f gives g. It is important to notice that a permutation of the switching functions 
is not simply a permutation of the input values {a, b,c}. A switching function is a set of output values for the inputs a, b, and c, so 
when we consider equivalent switching functions, we are permuting 2? possible outputs, not just three input values. For example, 
each binary triple (a, b, c) has a specific output associated with it. The permutation (acb) changes outputs as follows: 


(0, 0,0) + (0,0, 0) 
(0,0, 1) + (0,1, 0) 
(0, 1,0) + (1,0, 0) 


(1,1,0) + (1,0, 1) 
(Aes Gt, 


Let X be the set of output values for a switching function in n variables. Then |X| = 2”. We can enumerate these values as 


follows: 
(0,...,0,1) 40 
(0,...,1,0)H1 


(0,...,1,1) 42 


Co hee ee 


Now let us consider a circuit with four input variables and a single output. Suppose that we can permute the leads of any circuit 
according to the following permutation group: 


(a), (a, c), (b, d), (a, d, Cc, b), 
(a,b,c,d), (a,b)(c,d), (a,d)(b,c), (a,c)(b,d). 


The permutations of the four possible input variables induce the permutations of the output values in Table 14.27. 


Hence, there are 
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1 
g(2°+2-2 +2-2°+3-2") = 9616 


possible switching functions of four variables under this group of permutations. This number will be even smaller if we consider 
the full symmetric group on four letters. 


\(Table \text { } 14.27\). Permutations of switching functions in four variables 


Group Number 
Permutation Switching Function Permutation of Cycles 
(a) (0) 16 

(a,c) (2,8)(3,9)(6,12)(7,13) 12 

(b,d) (1,4)(3,6)(9,12)(11,14) 12 
(a,d,c,b) (1,2,4,8)(3,6.12,9)(5,10)(7,14,13,11) 6 
(a,b,c, d) (1,8,4,2)(3,9,12,6)(5,10)(7,11,13,14) 6 
(a,b)(c,d) (1,2)(4,8)(5,10)(6,9)(7,11)(13, 14) 10 
(a,d)(b,c) (1,8)(2,4)(3,12)(5,10)(7,14)(11,13) 10 
(a,c)(b,d) (1,4)(2,8)(3,12)(6,9)(7,13)(11, 14) 10 


Historical Note 


William Burnside was born in London in 1852. He attended Cambridge University from 1871 to 1875 and won the Smith's Prize in 
his last year. After his graduation he lectured at Cambridge. He was made a member of the Royal Society in 1893. Burnside wrote 
approximately 150 papers on topics in applied mathematics, differential geometry, and probability, but his most famous 
contributions were in group theory. Several of Burnside's conjectures have stimulated research to this day. One such conjecture was 
that every group of odd order is solvable; that is, for a group G of odd order, there exists a sequence of subgroups 


G= Hy, D> Hn-1 D+-+: D Hi D Hy = {e} 


such that H; is normal in Hj. and H;41 /H; is abelian. This conjecture was finally proven by W. Feit and J. Thompson in 1963. 
Burnside's The Theory of Groups of Finite Order, published in 1897, was one of the first books to treat groups in a modern context 
as opposed to permutation groups. The second edition, published in 1911, is still a classic. 
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14.4: Reading Questions 


Give an informal description of a group action. 
Describe the class equation. 
What are the groups of order 49? 


How many switching functions are there with 5 inputs? (Give both a simple expression and the total number as a single 
integer.) 


The “Historical Note” mentions the proof of Burnside's Conjecture. How long was the proof? 


cs 
é 
E 
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14.5: Exercises 


Examples 14.1—14.5 in the first section each describe an action of a group G on a set X, which will give rise to the 
equivalence relation defined by G-equivalence. For each example, compute the equivalence classes of the equivalence relation, 
the G-equivalence classes. 


Compute all X, and all G, for each of the following permutation groups. 


1. X = {1, 2,3}, @= $3 = {(1), (12), (13), (23), (123), (13 2)} 
2. X ={1,2,3,4,5,6},G = {(1), (12), (345), (354), (12)(345), (1 2)(354)} 


Compute the G-equivalence classes of X for each of the G-sets in Exercise 14.5.2 For each 2 © X verify that 
|G| =|O2|-|Ge|. 


Let G be the additive group of real numbers. Let the action of 6 € G on the real plane R? be given by rotating the plane 
counterclockwise about the origin through 6 radians. Let P be a point on the plane other than the origin. 


1. Show that R? is a G-set. 
2. Describe geometrically the orbit containing P. 
3. Find the group G'p. 


Let G = Ay and suppose that G acts on itself by conjugation; that is, (g,h) ++ ghg-. 


1. Determine the conjugacy classes (orbits) of each element of G. 
2. Determine all of the isotropy subgroups for each element of G. 


Find the conjugacy classes and the class equation for each of the following groups. 


1. S4 
DB) 
3. Zo 
4. Qs 


Write the class equation for S; and for As. 


If a square remains fixed in the plane, how many different ways can the corners of the square be colored if three colors are 
used? 
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How many ways can the vertices of an equilateral triangle be colored using three different colors? 
Find the number of ways a six-sided die can be constructed if each side is marked differently with 1, ..., 6 dots. 
Up to a rotation, how many ways can the faces of a cube be colored with three different colors? 


Consider 12 straight wires of equal lengths with their ends soldered together to form the edges of a cube. Either silver or 
copper wire can be used for each edge. How many different ways can the cube be constructed? 


Suppose that we color each of the eight corners of a cube. Using three different colors, how many ways can the corners be 
colored up to a rotation of the cube? 


Each of the faces of a regular tetrahedron can be painted either red or white. Up to a rotation, how many different ways can the 
tetrahedron be painted? 


Suppose that the vertices of a regular hexagon are to be colored either red or white. How many ways can this be done up to a 
symmetry of the hexagon? 


= 
= 
E 
E 
E 
E 


A molecule of benzene is made up of six carbon atoms and six hydrogen atoms, linked together in a hexagonal shape as in 
Figure 14.28 


1. How many different compounds can be formed by replacing one or more of the hydrogen atoms with a chlorine atom? 
2. Find the number of different chemical compounds that can be formed by replacing three of the six hydrogen atoms in a 
benzene ring with a C'H3 radical. 
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H 


Figure 14.28.A benzene ring 


How many equivalence classes of switching functions are there if the input variables 2,, x2, and x3 can be permuted by any 
permutation in $3? What if the input variables 21, x2, 23, and x4 can be permuted by any permutation in $4? 


How many equivalence classes of switching functions are there if the input variables 21, x2, x3, and x4 can be permuted by 
any permutation in the subgroup of 4 generated by the permutation (21, 2,23, #4)? 


A striped necktie has 12 bands of color. Each band can be colored by one of four possible colors. How many possible different- 
colored neckties are there? 


A group acts faithfully on a G-set X if the identity is the only element of G that leaves every element of X fixed. Show that G 
acts faithfully on X if and only if no two distinct elements of G have the same action on each element of X. 


E 
5 
E 
E 


GNU Free Documentation License 14.5.3 https ://math.libretexts.org/@go/page/81145 


Oibretexts: 


Let p be prime. Show that the number of different abelian groups of order p” (up to isomorphism) is the same as the number of 
conjugacy classes in S,,. 


Let a € G. Show that for any g € G, gC(a)g 1 =C(gag“*). 


Let |G| = p” be a nonabelian group for p prime. Prove that |Z(G)| <p” ?. 
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14.6: Programming Exercise 


Write a program to compute the number of conjugacy classes in S,,. What is the largest n for which your program will work? 


This page titled 14.6: Programming Exercise is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or 
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14.8: Sage 


Groups can be realized in many ways, such as as sets of permutations, as sets of matrices, or as sets of abstract symbols related by 
certain rules (“presentations”) and in myriad other ways. We have concentrated on permutation groups because of their concrete 
feel, with elements written as functions, and because of their thorough implementation in Sage. Group actions are of great interest 
when the set they act on is the group itself, and group actions will figure prominently in the proofs of the main results of the next 
chapter. However, any time we have a group action on a set, we can view that group as a permutation group on the elements of the 
set. So permutation groups are an area of group theory of independent interest, with its own definitions and theorems. 


We will describe Sage's commands applicable when a group action arises naturally via conjugation, and then move into the more 
general situation in a more general application. 


Conjugation as a Group Action 


We might think we need to be careful how Sage defines conjugation (gg versus g ‘ag) and the difference between Sage and 
the text on the order of products. However, if you look at the definition of the center and centralizer subgroups you can see that any 
difference in ordering is irrelevant. Here are the group action commands for the particular action that is conjugation of the elements 
of the group. 


Sage has a permutation group method .center() which returns the subgroup of fixed points. The permutation group method, 

.centralizer(g) , returns a subgroup that is the stabilizer of the group element g . Finally, the orbits are given by 
conjugacy classes, but Sage will not flood you with the full conjugacy classes and instead gives back a list of one element per 
conjugacy class, the representatives, via the permutation group method .conjugacy_classes_representatives() 
You can manually reconstruct a conjugacy class from a representative, as we do in the example below. 


Here is an example of the above commands in action. Notice that an abelian group would be a bad choice for this example. 


Notice that in the one conjugacy class constructed all the elements have the same cycle structure, which is no accident. Notice too 
that rep and a are the same element, and the product of the order of the centralizer (4) and the size of the conjugacy class (4) 
equals the order of the group (16), which is a variant of the conclusion of Theorem 14.11. 


Verify that the following is a demonstration of the class equation in the special case when the action is conjugation, but would be 
valid for any group, rather than just D . 


Graph Automorphisms 


As mentioned, group actions can be even more interesting when the set they act on is different from the group itself. One class of 
examples is the group of symmetries of a geometric solid, where the objects in the set are the vertices of the object, or perhaps 
some other aspect such as edges, faces or diagonals. In this case, the group is all those permutations that move the solid but leave it 
filling the same space before the motion (“rigid motions”). 


In this section we will examine something very similar. A graph is a mathematical object, consisting of vertices and edges, but the 
only structure is whether or not any given pair of vertices are joined by an edge or not. The group consists of permutations of 
vertices that preserve the structure, that is, permutations of vertices that take edges to edges and non-edges to non-edges. It is very 
similar to a symmetry group, but there is no notion of any geometric relationships being preserved. 


Here is an example. You will need to run the first compute cell to define the graph and get a nice graphic representation. 


Your plot should look like the vertices and edges of a cube, but may not quite look regular, which is fine, since the geometry is not 
relevant. Vertices are labeled with strings of three binary digits, 0 or 1, and any two vertices are connected by an edge if their 
strings differ in exactly one location. We might expect the group of symmetries to have order 24, rather than order 48, given its 
resemblance to a cube (in appearance and in name). However, when not restricted to rigid motions, we have new permutations that 
preserve edges. One in particular is to interchange two “opposite faces.” Locate two 4-cycles opposite of each other, listed in the 
same order: 000,010, 110, 100and 001, 011, 111, 101 Notice that each cycle looks very similar, but all the vertices of the first end 
in a zero and the second cycle has vertices ending in a one. 


We can create explicitly the permutation that interchanges these two opposite faces, using a text version of the permutation in cycle 
notation. 


We can use this group to illustrate the relevant Sage commands for group actions. 
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So this action has only one (big) orbit. This implies that every vertex is “like” any other. When a permutation group behaves this 
way, we Say the group is transitive. 


If every vertex is “the same” we can compute the stabilizer of any vertex, since they will all be isomorphic. Because vertex 000 is 
the simplest in some sense, we compute its stabilizer. 


That S_ has 6 elements is no surprise, since the group has order 48 and the size of the lone orbit is 8. But we can go one step 
further. The three vertices of the graph attached directly to 000 are 100,010,001. Any automorphism of the graph that fixes 000 
must then permute the three adjacent vertices. There are 3! = 6 possible ways to do this, and you can check that each appears in 
one of the six elements of the stabilizer. So we can understand a transitive group by considering the smaller stabilizer, and in this 
case we can see that each element of the stabilizer is determined by how it permutes the neighbors of the stabilized vertex. 


Transitive groups are both unusual and important. To contrast, here is a graph automorphism group that is far from transitive 
(without being trivial). A path is a graph that has all of its vertices in a line. Run the first compute cell to see a path on 11 vertices. 


The automorphism group is the trivial identity automorphism (always) and an order 2 permutation that “flips” the path end-to-end. 
The group is far from transitive and there are many orbits. 


Most of the stabilizers are trivial, with one exception. As subgroups of a group of order 2, there really are not too many options. 
How would this final example have been different if we had used a path on 10 vertices? 


NOTE: There was once a small bug with stabilizers being created as subgroups of symmetric groups on fewer symbols than the 
correct number. This is fixed in Sage 4.8 and newer. Note the correct output below, and you can check your installation by running 
these commands. If you do not see the singleton [4] in your output, you should definitely update your copy of Sage. 


This page titled 14.8: Sage is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or curated by Thomas 
W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the LibreTexts platform; a 


detailed edit history is available upon request. 
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14.9: Sage Exercises 


Construct the Higman-Sims graph with the command graphs.HigmanSimsGraph() . Then construct the automorphism 
group and determine the order of the one interesting normal subgroup of this group. You can try plotting the graph, but the 
graphic is unlikely to be very informative. 


This exercise asks you to verify the class equation outside of the usual situation where the group action is conjugation. 
Consider the example of the automorphism group of the path on 11 vertices. First construct the list of orbits. From each orbit, 
grab the first element of the orbit as a representative. Compute the size of the orbit as the index of the stabilizer of the 
representative in the group via Theorem 14.11. (Yes, you could just compute the size of the full orbit, but the idea of the 
exercise is to use more group-theoretic results.) Then sum these orbit-sizes, which should equal the size of the whole vertex set 
since the orbits form a partition. 


Construct a simple graph (no loops or multiple edges), with at least two vertices and at least one edge, whose automorphism 
group is trivial. You might start experimenting by drawing pictures on paper before constructing the graph. A command like 
the following will let you construct a graph from edges. The graph below looks like a triangle or 3-cycle. 


For the following two pairs of groups, compute the list of conjugacy class representatives for each group in the pair. For each 
part, compare and contrast the results for the two groups in the pair, with thoughtful and insightful comments. 


1. The full symmetric group on 5 symbols, 55, and the alternating group on 5 symbols, As. 
2. The dihedral groups that are symmetries of a 7-gon and an 8-gon, D7 and Dg. 


Use the command graphs.CubeGraph(4)_ to build the four-dimensional cube graph, Q4. Using a plain .plot() 
command (without a spring layout) should create a nice plot. Construct the automorphism group of the graph, which will 
provide a group action on the vertex set. 


1. Construct the orbits of this action, and comment. 

2. Construct a stabilizer of a single vertex (which is a subgroup of the full automorphism group) and then consider the action 
of this group on the vertex set. Construct the orbits of this new action, and comment carefully and fully on your 
observations, especially in terms of the vertices of the graph. 


Build the graph given by the commands below. The result should be a symmetric-looking graph with an automorphism group 
of order 16. 


Repeat the two parts of the previous exercise, but realize that in the second part there are now two different stabilizers to 
create, so build both and compare the differences in the stabilizers and their orbits. Creating a second plot with 
G.plot(layout='planar') might provide extra insight. 
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15: The Sylow Theorems 


We already know that the converse of Lagrange's Theorem is false. If G is a group of order m and n divides m, then G does not 
necessarily possess a subgroup of order n. For example, A, has order 12 but does not possess a subgroup of order 6. However, the 
Sylow Theorems do provide a partial converse for Lagrange’s Theorem—in certain cases they guarantee us subgroups of specific 
orders. These theorems yield a powerful set of tools for the classification of all finite nonabelian groups. 

15.1: The Sylow Theorems 

15.2: Examples and Applications 

15.3: Reading Questions 

15.4: Exercises 

15.5: A Project 

15.6: References and Suggested Readings 

15.7: Sage 

15.8: Sage Exercises 
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15.1: The Sylow Theorems 


We will use what we have learned about group actions to prove the Sylow Theorems. Recall for a moment what it means for G' to 
act on itself by conjugation and how conjugacy classes are distributed in the group according to the class equation, discussed in 
Chapter 14. A group G acts on itself by conjugation via the map (g,z) +> gg‘. Let 21,..., 2% be representatives from each of 
the distinct conjugacy classes of G that consist of more than one element. Then the class equation can be written as 


IG] =|2(G)| +[G@ = C(a1)) +--+» +[@: C(xx)], 
where Z(G) ={g¢G: gx =agforallx ¢ G}_ is the center of G and C(z;)={g¢€G: gx; =2x,;g} is the centralizer 
subgroup of 2;. 


We begin our investigation of the Sylow Theorems by examining subgroups of order p, where p is prime. A group G is a p-group 
if every element in G has as its order a power of p, where p is a prime number. A subgroup of a group G is a p-subgroup if it is a 


p-group. 


Theorem 15.1. Cauchy 


Let G be a finite group and p a prime such that p divides the order of G. Then G contains a subgroup of order p. 


Proof 


We will use induction on the order of G. If |G| =p, then clearly G itself is the required subgroup. We now assume that 
every group of order k, where p <k <n and p divides k, has an element of order p. Assume that |G| =n and p|n and 
consider the class equation of G: 


|G| =|Z(G)|+[G: C(a1)] +---+[G: C(xx)]. 
We have two cases. 


Case 1. 


Suppose the order of one of the centralizer subgroups, C'(x;), is divisible by p for some 1,1 =1,...,k. In this case, by 
our induction hypothesis, we are done. Since C'(z;) is a proper subgroup of G and p divides |C(x;)|, C(x;) must contain 
an element of order p. Hence, G must contain an element of order p. 


Case 2. 


Suppose the order of no centralizer subgroup is divisible by p. Then p divides [G: C(x;)], the order of each conjugacy 
class in the class equation; hence, p must divide the center of G, Z(G). Since Z(G) is abelian, it must have a subgroup of 
order p by the Fundamental Theorem of Finite Abelian Groups. Therefore, the center of G contains an element of order p. 


Let G be a finite group. Then G is a p-group if and only if \(|G| = pAn\text{.}\ 


Let us consider the group As. We know that |As| = 60 = 27-3-5. 
Solution 


By Cauchy's Theorem, we are guaranteed that As has subgroups of orders 2, 3 and 5. The Sylow Theorems will give us even 
more information about the possible subgroups of As. 


We are now ready to state and prove the first of the Sylow Theorems. The proof is very similar to the proof of Cauchy's Theorem. 
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Theorem 15.4. First Sylow Theorem 


Let G be a finite group and p a prime such that p" divides |G. Then G contains a subgroup of order p”. 


Proof 


We induct on the order of G once again. If |G'| = p, then we are done. Now suppose that the order of G is n with n > p 
and that the theorem is true for all groups of order less than n, where p divides n. We shall apply the class equation once 
again: 


|G| =|Z(G)|+[G: C(a1)] +---+[G: C(xx)]. 


First suppose that p does not divide [G:C(z;)] for some 7%. Then p”||C(a;)|, since p” divides 
|G| =|C(ax;)|-[G: C(a;)]. Now we can apply the induction hypothesis to C'(a;). 


Hence, we may assume that p divides [|G : C(x;)] for all <. Since p divides |G], the class equation says that p must divide 
|Z(G)|; hence, by Cauchy's Theorem, Z(G) has an element of order p, say g. Let N be the group generated by g. Clearly, 
N is a normal subgroup of Z(G) since Z(G) is abelian; therefore, N is normal in G since every element in Z(G) 
commutes with every element in G. Now consider the factor group G/N of order |G|/p. By the induction hypothesis, 
G/N contains a subgroup H of order p""!. The inverse image of H under the canonical homomorphism ¢: G+ G/N is 
a subgroup of order p” in G. 


A Sylow p-subgroup P of a group G is a maximal p-subgroup of G. To prove the other two Sylow Theorems, we need to consider 
conjugate subgroups as opposed to conjugate elements in a group. For a group G, let S be the collection of all subgroups of G. For 
any subgroup H, S is a H-set, where H acts on S by conjugation. That is, we have an action 


HxS-S 
defined by 
h-K++hKh"! 
for K in S. 
The set 


N(H) ={9¢€ G: gHg" =H} 


is a subgroup of G called the the normalizer of H in G. Notice that H is a normal subgroup of N(H). In fact, N(#) is the largest 
subgroup of G in which H is normal. 


Let P be a Sylow p-subgroup of a finite group G and let x have as its order a power of p. If x-! Px = P, then € P. 


Proof 


Certainly x € N(P), and the cyclic subgroup, (2P) C N(P)/P, has as its order a power of p. By the Correspondence 
Theorem there exists a subgroup H of N(P) containing P such that H/P = (xP). Since |H| =|P|-|(aP)|, the order 
of H must be a power of p. However, P is a Sylow p-subgroup contained in H. Since the order of P is the largest power 
of p dividing |G|, H = P. Therefore, H/ P is the trivial subgroup and «P = P, oraz € P. 


Let H and K be subgroups of G. The number of distinct H-conjugates of K is |H : N(k)N A]. 


Proof 


We define a bijection between the conjugacy classes of K and the right cosets of N(K)NH by 
hl Kh++(N(K)NH)h. To show that this map is a bijection, let hi,hg¢H and suppose _ that 


(N(K)O A)hi =(N(K)NA)h2. Then hh; * € N(K). Therefore, K = hgh," Khyh,* or hy Kh, =h;' Kh, 
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and the map is an injection. It is easy to see that this map is surjective; hence, we have a one-to-one and onto map between 
the H-conjugates of K and the right cosets of N(K)NH in H. 


Theorem 15.7. Second Sylow Theorem 


Let G be a finite group and p a prime dividing |G|. Then all Sylow p-subgroups of G are conjugate. That is, if P, and P» are 
two Sylow p-subgroups, there exists a g € G such that gP;g~1 = Py. 
Proof 

Let P be a Sylow p-subgroup of G and suppose that |G] = p’m with |P| =p”. Let 

Se Die renee el 
consist of the distinct conjugates of P in G. By Lemma 15.6 k =[G: N(P)]. Notice that 
|G = p’m =|N(P)|-[@: N(P)] = |N(P)|-F. 
Since p" divides |N(P)|, p cannot divide k. 


Given any other Sylow p-subgroup Q, we must show that Q € S. Consider the Q-conjugacy classes of each P;. Clearly, 
these conjugacy classes partition S. The size of the partition containing P; is [Q : N(P;)QQ] by Lemma 15.6 and 
Lagrange's Theorem tells us that |Q| =[Q: N(P;)NQ]|N(P,) AQ]. Thus, [(Q: N(P;) 1 Q] must be a divisor of 
|Q| =p". Hence, the number of conjugates in every equivalence class of the partition is a power of p. However, since p 
does not divide k, one of these equivalence classes must contain only a single Sylow p-subgroup, say P;. In this case, 
z ' Px =P; forallz € Q. By Lemma 15.5, P; =Q. 


Theorem 15.8 


Let G be a finite group and let p be a prime dividing the order of G. Then the number of Sylow p-subgroups is congruent to 
1 (mod p) and divides |G|. 


Proof 
Let P be a Sylow p-subgroup acting on the set of Sylow p-subgroups, 
SS UP = IPhig Pago on y leah 


by conjugation. From the proof of the Second Sylow Theorem, the only P-conjugate of P is itself and the order of the 
other P-conjugacy classes is a power of p. Each P-conjugacy class contributes a positive power of p toward |S| except the 
equivalence class {P}. Since |S| is the sum of positive powers of p and 1, |S| =1 (mod p). 


Now suppose that G acts on S by conjugation. Since all Sylow p-subgroups are conjugate, there can be only one orbit 
under this action. For P € S, 


|S| = |orbit of P| =[G: N(P)| 


by Lemma 15.6 But [G: N(P)] is a divisor of |G]; consequently, the number of Sylow p-subgroups of a finite group must 
divide the order of the group. 


Historical Note 


Peter Ludvig Mejdell Sylow was born in 1832 in Christiania, Norway (now Oslo). After attending Christiania University, Sylow 
taught high school. In 1862 he obtained a temporary appointment at Christiania University. Even though his appointment was 
relatively brief, he influenced students such as Sophus Lie (1842-1899). Sylow had a chance at a permanent chair in 1869, but 
failed to obtain the appointment. In 1872, he published a 10-page paper presenting the theorems that now bear his name. Later Lie 
and Sylow collaborated on a new edition of Abel's works. In 1898, a chair at Christiania University was finally created for Sylow 
through the efforts of his student and colleague Lie. Sylow died in 1918. 
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15.2: Examples and Applications 


Example 15.9 


Using the Sylow Theorems, we can determine that A; has subgroups of orders 2, 3, 4, and 5. The Sylow p-subgroups of As 
have orders 3, 4, and 5. The Third Sylow Theorem tells us exactly how many Sylow p-subgroups As has. 


Solution 


Since the number of Sylow 5-subgroups must divide 60 and also be congruent to 1 (mod 5), there are either one or six Sylow 
5-subgroups in As. All Sylow 5-subgroups are conjugate. If there were only a single Sylow 5-subgroup, it would be conjugate 
to itself; that is, it would be a normal subgroup of As. Since As has no normal subgroups, this is impossible; hence, we have 
determined that there are exactly six distinct Sylow 5-subgroups of As. 


The Sylow Theorems allow us to prove many useful results about finite groups. By using them, we can often conclude a great deal 
about groups of a particular order if certain hypotheses are satisfied. 


Theorem 15.10 


If p and q are distinct primes with p < q, then every group G of order pq has a single subgroup of order q and this subgroup is 
normal in G. Hence, G cannot be simple. Furthermore, if qg #1 (mod p), then G is cyclic. 


Proof 


We know that G contains a subgroup H of order g. The number of conjugates of H divides pq and is equal to 1+ kq for 
k=0,1,.... However, 1+q is already too large to divide the order of the group; hence, H can only be conjugate to 
itself. That is, H must be normal in G. 


The group G also has a Sylow p-subgroup, say K. The number of conjugates of K must divide q and be equal to 1+ kp 
fork =0,1,.... Since q is prime, either 1+kp=q or1+kp=1. If 1+kp=1, then K is normal in G. In this case, 
we can easily show that G satisfies the criteria, given in Chapter 9, for the internal direct product of H and K. Since H is 
isomorphic to Z, and K is isomorphic to Z,,G = Zp x Zy = Zpq by Theorem 9.21 


Every group of order 15 is cyclic. 
Solution 


This is true because 15 = 5-3 and5 #1 (mod 3). 


Let us classify all of the groups of order 99 = 37-11 up to isomorphism. 
Solution 


First we will show that every group G of order 99 is abelian. By the Third Sylow Theorem, there are 1+3k Sylow 3- 
subgroups, each of order 9, for some k = 0,1,2,.... Also, 1+3k must divide 11; hence, there can only be a single normal 
Sylow 3-subgroup H in G. Similarly, there are 1 + 11k Sylow 11-subgroups and 1+11k must divide 9. Consequently, there 
is only one Sylow 11-subgroup K in G. By Corollary 14.16, any group of order p? is abelian for p prime; hence, H is 
isomorphic either to Z3 x Z3 or to Zg. Since K has order 11, it must be isomorphic to Z,. Therefore, the only possible 
groups of order 99 are Z3 x Z3 x Z 11 or Zg X Zy, up to isomorphism. 


To determine all of the groups of order 5- 7-47 = 1645, we need the following theorem. 
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Let G’ = (aba-!b : a,b € G) be the subgroup consisting of all finite products of elements of the form aba~'b~! in a group 
G. Then G' is a normal subgroup of G and G/G' is abelian 


The subgroup G’ of G is called the commutator subgroup of G. We leave the proof of this theorem as an exercise (Exercise 
10.4.14in Chapter 10). 


Example 15.14 


We will now show that every group of order 5-7 - 47 = 1645 is abelian, and cyclic by Theorem 9.21. 
Solution 


By the Third Sylow Theorem, G has only one subgroup H;, of order 47. So G/H, has order 35 and must be abelian by 
Theorem 15.10, Hence, the commutator subgroup of G is contained in H which tells us that |G"| is either 1 or 47. If |G’| = 1, 
we are done. Suppose that |G’| = 47. The Third Sylow Theorem tells us that G has only one subgroup of order 5 and one 
subgroup of order 7. So there exist normal subgroups Hz and H3 in G, where |H2| =5 and |H3| = 7. In either case the 
quotient group is abelian; hence, G’ must be a subgroup of H;, i = 1, 2. Therefore, the order of G’ is 1, 5, or 7. However, we 
already have determined that |G’| = 1 or 47. So the commutator subgroup of G is trivial, and consequently G is abelian. 


Finite Simple Groups 


Given a finite group, one can ask whether or not that group has any normal subgroups. Recall that a simple group is one with no 
proper nontrivial normal subgroups. As in the case of As, proving a group to be simple can be a very difficult task; however, the 
Sylow Theorems are useful tools for proving that a group is not simple. Usually, some sort of counting argument is involved. 


Let us show that no group G of order 20 can be simple. 
Solution 


By the Third Sylow Theorem, G contains one or more Sylow 5-subgroups. The number of such subgroups is congruent to 
1 (mod 5) and must also divide 20. The only possible such number is 1. Since there is only a single Sylow 5-subgroup and 
all Sylow 5-subgroups are conjugate, this subgroup must be normal. 


Example 15.16 


Let G be a finite group of order p”, n > 1 and p prime. By Theorem 14.15, G has a nontrivial center. 
Solution 


Since the center of any group G is a normal subgroup, G cannot be a simple group. Therefore, groups of orders 4, 8, 9, 16, 25, 
27,32, 49, 64, and 81 are not simple. In fact, the groups of order 4, 9, 25, and 49 are abelian by Corollary 14.16 


No group of order 56 = 2° -7 is simple. We have seen that if we can show that there is only one Sylow p-subgroup for some 
prime p dividing 56, then this must be a normal subgroup and we are done. 


Solution 


By the Third Sylow Theorem, there are either one or eight Sylow 7-subgroups. If there is only a single Sylow 7-subgroup, then 
it must be normal. 


On the other hand, suppose that there are eight Sylow 7-subgroups. Then each of these subgroups must be cyclic; hence, the 
intersection of any two of these subgroups contains only the identity of the group. This leaves 8-6 = 48 distinct elements in 
the group, each of order 7. Now let us count Sylow 2-subgroups. There are either one or seven Sylow 2-subgroups. Any 
element of a Sylow 2-subgroup other than the identity must have as its order a power of 2; and therefore cannot be one of the 
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48 elements of order 7 in the Sylow 7-subgroups. Since a Sylow 2-subgroup has order 8, there is only enough room for a 
single Sylow 2-subgroup in a group of order 56. If there is only one Sylow 2-subgroup, it must be normal. 


For other groups G, it is more difficult to prove that G is not simple. Suppose G has order 48. In this case the technique that we 
employed in the last example will not work. We need the following lemma to prove that no group of order 48 is simple. 


Theorem 15.18 


Let H and K be finite subgroups of a group G. Then 


_ (|Al-|K] 
|Hk| = ———_. 
IHN K| 
Proof 
Recall that 
HK=({hk:he H,ke K}. 


Certainly, | HK | <|H|-|K| since some element in HK could be written as the product of different elements in H and K. 
It is quite possible that hiki = h2k2 for hi, he € H and ki, k2 € K. If this is the case, let 


a= (hi) the = 1 (kg). 
Notice thata € HO K, since (hi) ‘hg is in H and ko(k,)? is in K; consequently, 


ho = Piao 
ko = ak, : 
Conversely, let h =h,b-! andk= bk, forb€ HN K. Thenhk=h,k,, whereh € H andke€ K. Hence, any element 


hk © HK canbe written in the form h,;k; for h; © H and k; € K, as many times as there are elements in HK; that is, 
|H™ K| times. Therefore, |HA| = (|H|-|K|)/|HNK]. 


Example 15.19 


To demonstrate that a group G of order 48 is not simple, we will show that G contains either a normal subgroup of order 8 or a 
normal subgroup of order 16. 


Solution 


By the Third Sylow Theorem, G has either one or three Sylow 2-subgroups of order 16. If there is only one subgroup, then it 
must be a normal subgroup. 


Suppose that the other case is true, and two of the three Sylow 2-subgroups are H and K. We claim that |H K| =8. If 
|HOK| <4, then by Lemma 15.18, 


HK] > ise _ 


64, 


which is impossible. Notice that HM K has index two in both of H and K, so is normal in both, and thus H and K are each 
in the normalizer of HM K. Because H is a subgroup of N(HMK) and because N(HMK) has strictly more than 16 
elements, |N(4HMK)| must be a multiple of 16 greater than 1, as well as dividing 48. The only possibility is that 
|N(HOK)| =48. Hence, N(H1K) =G. 


The following famous conjecture of Burnside was proved in a long and difficult paper by Feit and Thompson [2]. 


Theorem 15.20. Odd Order Theorem 


Every finite simple group of nonprime order must be of even order 
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The proof of this theorem laid the groundwork for a program in the 1960s and 1970s that classified all finite simple groups. The 
success of this program is one of the outstanding achievements of modern mathematics. 


This page titled 15.2: Examples and Applications is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, 
and/or curated by Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of 
the LibreTexts platform; a detailed edit history is available upon request. 
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15.3: Reading Questions 


State Sylow's First Theorem. 
How many groups are there of order 69? Why? 
Give two descriptions, fundamentally different in character, of the normalizer of a subgroup. 


Suppose that G is an abelian group. What is the commutator subgroup of G, and how do you know? 


7B 8 :B :B 


What's all the fuss about Sylow's Theorems? 


This page titled 15.3: Reading Questions is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or 
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15.4: Exercises 


What are the orders of all Sylow p-subgroups where G has order 18, 24, 54, 72, and 80? 

Find all the Sylow 3-subgroups of $4 and show that they are all conjugate. 

Show that every group of order 45 has a normal subgroup of order 9. 

Let H be a Sylow p-subgroup of G. Prove that H is the only Sylow p-subgroup of G contained in N(H). 
Prove that no group of order 96 is simple. 

Prove that no group of order 160 is simple. 


If H is a normal subgroup of a finite group G and |H| = p* for some prime p, show that H is contained in every Sylow p- 
subgroup of G. 


Let G be a group of order p?q, where p and q are distinct primes such that qt and pt q’ —1. Prove that G must be 
abelian. Find a pair of primes for which this is true. 


Show that a group of order 33 has only one Sylow 3-subgroup. 


7B iB ¢:8 7B eB iB eB :B 


Let H be a subgroup of a group G. Prove or disprove that the normalizer of H is normal in G. 


Let G be a finite group whose order is divisible by a prime p. Prove that if there is only one Sylow p-subgroup in G, it must be 
a normal subgroup of G. 


BEB 
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Let G be a group of order p’, p prime. Prove that G' contains a normal subgroup of order p’?. 

Suppose that G is a finite group of order p”k, where k < p. Show that G must contain a normal subgroup. 
Let H be a subgroup of a finite group G. Prove that gV(H)g ' = N(gHg~') for any g€ G. 

Prove that a group of order 108 must have a normal subgroup. 

Classify all the groups of order 175 up to isomorphism. 

Show that every group of order 255 is cyclic. 


Let G have order p{' ---p," and suppose that G has n Sylow p-subgroups P;,...,.P, where |P;| =p;'. Prove that G is 
isomorphic to P, x--- x Py. 


Let P be a normal Sylow p-subgroup of G. Prove that every inner automorphism of G fixes P. 


What is the smallest possible order of a group G such that G is nonabelian and |G] is odd? Can you find such a group? 


7H: GB BB 7B BB 


The Frattini Lemma 


If H is anormal subgroup of a finite group G and P is a Sylow p-subgroup of H, for each g € G show that there is an h in H 
such that gPg-! =hPh-!. Also, show that if N is the normalizer of P, then G= HN. 


oR 


Show that if the order of G is p”q, where p and q are primes and p > q, then G contains a normal subgroup. 


Prove that the number of distinct conjugates of a subgroup H of a finite group G is [|G : N(H)}. 


: 
. 
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Prove that a Sylow 2-subgroup of $5 is isomorphic to D4. 


Another Proof of the Sylow Theorems 


a. Suppose p is prime and p does not divide m. Show that 


(Gr) 

p pk = 

b. Let S denote the set of all p* element subsets of G. Show that p does not divide |S]. 

c. Define an action of G on S by left multiplication, aT = {at:t € T} fora € G andT € S. Prove that this is a group 
action. 

d. Prove p{ |Or| for some T' € S. 

e. Let {Tj,..., T,} be an orbit such that p{ u and H ={g€ G: gT, =7T,}. Prove that H is a subgroup of G and show 
that |G| = u|H]. 

f. Show that p* divides |H| and p* < |H]. 

g. Show that |H| = |O7| < p*; conclude that therefore p* = | H]. 


Let G be a group. Prove that G’ = (aba 'b-1 : a,b € G) is anormal subgroup of G and G/G’ is abelian. Find an example to 
show that {aba 1b"! : a,b € G} is not necessarily a group. 
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15.5: A Project 


The main objective of finite group theory is to classify all possible finite groups up to isomorphism. This problem is very difficult 
even if we try to classify the groups of order less than or equal to 60. However, we can break the problem down into several 
intermediate problems. This is a challenging project that requires a working knowledge of the group theory you have learned up to 
this point. Even if you do not complete it, it will teach you a great deal about finite groups. You can use Table 15.21 as a guide. 


\(Table \text { } 15.21\). Numbers of distinct groups G, |G] < 60 


Order Number Order Number Order Number Order Number 
1 , 16 14 31 1 46 2 
2 2 17 1 32 51 47 1 
3 2 18 2 33 1 48 52 
4 ? 19 ? 34 ? 49 ? 
5 ? 20 5 35 1 50 5 
6 - 21 2 36 14 51 ? 
7 ? 22 2 37 1 52 By 
8 fe 23 1 38 ? 53 ? 
9 ® 24 2 39 2 54 15 
10 fe 25 2 40 14 55 2 
11 Rg 26 2 Al 1 56 2 
12 5 27 5 42 ? 57 2 
13 ey 28 2 43 1 58 By 
14 ie 29 1 44 4 59 1 
15 1 30 4 45 2 60 13 


Find all simple groups G ( |G| < 60). Do not use the Odd Order Theorem unless you are prepared to prove it. 


Find the number of distinct groups G, where the order of G is n forn =1,..., 60. 


Find the actual groups (up to isomorphism) for each n. 


This page titled 15.5: A Project is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or curated by 
Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the LibreTexts 


platform; a detailed edit history is available upon request. 


GNU Free Documentation License 15.5.1 https ://math.libretexts.org/@go/page/81155 


Oibretexts” 


15.6: References and Suggested Readings 


eats H. “A Short History of the Fields Medal,” Mathematical Intelligencer 1 (1978), 127-29. 

ai W. and Thompson, J. G. “Solvability of Groups of Odd Order,” Pacific Journal of Mathematics 13 (1963), 775-1029. 
Cia J. A. “The Search for Finite Simple Groups,” Mathematics Magazine 49 (1976), 163-79. 

re D. “Classifying the Finite Simple Groups,” Bulletin of the American Mathematical Society 14 (1986), 1-98. 
Cenee D. Finite Groups. AMS Chelsea Publishing, Providence RI, 1968. 

[6] 


Gorenstein, D., Lyons, R., and Solomon, R. The Classification of Finite Simple Groups. American Mathematical Society, 
Providence RI, 1994. 


This page titled 15.6: References and Suggested Readings is shared under a GNU Free Documentation License 1.3 license and was authored, 
remixed, and/or curated by Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and 
standards of the LibreTexts platform; a detailed edit history is available upon request. 


GNU Free Documentation License 15.6.1 https ://math.libretexts.org/@go/page/81156 


Oibretexts: 


15.7: Sage 
Sylow Subgroups 


The Sage permutation group method .sylow_subgroup(p) will return a single Sylow p-subgroup. If the prime is not a 
proper divisor of the group order it returns a subgroup of order p®, in other words, a trivial subgroup. So be careful about how you 
construct your primes. Sometimes, you may only want one such Sylow subgroup, since any two Sylow p-subgroups are conjugate, 
and hence isomorphic (Theorem 15.7). This also means we can create other Sylow p-subgroups by conjugating the one we have. 
The permutation group method .conjugate(g) will conjugate the group by g . 


With repeated conjugations of a single Sylow p-subgroup, we will always create duplicate subgroups. So we need to use a slightly 
complicated construction to form a list of just the unique subgroups as the list of conjugates. This routine that computes all Sylow 
p-subgroups can be helpful throughout this section. It could be made much more efficient by conjugating by just one element per 
coset of the normalizer, but it will be sufficient for our purposes here. Be sure to execute the next cell if you are online, so the 
function is defined for use later. 


Lets investigate the Sylow subgroups of the dihedral group Dj,. As a group of order 36 = 2? - 3”, we know by the First Sylow 
Theorem that there is a Sylow 2-subgroup of order 4 and a Sylow 3-subgroup of order 9. First for p = 2, we obtain one Sylow 2- 
subgroup, form all the conjugates, and form a list of non-duplicate subgroups. (These commands take a while to execute, so be 
patient.) 


The Third Sylow Theorem tells us that for p = 2 we would expect 1, 3 or 9 Sylow 2-subgroups, so our computational result of 9 
subgroups is consistent with what the theory predicts. Can you visualize each of these subgroups as symmetries of an 18-gon? 
Notice that we also have many subgroups of order 2 inside of these subgroups of order 4. 


Now for the case of p = 3. 


What does the Third Sylow Theorem predict? Just 1 or 4 Sylow 3-subgroups. Having found just one subgroup computationally, we 
know that all of the conjugates of the lone Sylow 3-subgroup are equal. In other words, the Sylow 3-subgroup is normal in Djs. 
Let us check anyway. 


At least one of the subgroups of order 3 contained in this Sylow 3-subgroup should be obvious by looking at the orders of the 
generators, and then you may even notice that the generators given could be reduced, and one is a power of the other. 


Remember that there are many other subgroups, of other orders. For example, can you construct a subgroup of order 6 = 2-3 in 
Dj3? 


Normalizers 


A new command that is relevant to this section is the construction of a normalizer. The Sage command G.normalizer(H) 


will return the subgroup of G containing elements that normalize the subgroup H . We illustrate its use with the Sylow 
subgroups from above. 


The normalizer of a subgroup always contains the whole subgroup, so the normalizer of S2_ is as small as possible. We already 
knew SS isnormalin G , so it is no surprise that its normalizer is as big as possible — every element of G normalizes S3 . 
Let us compute a normalizer in D1, that is more “interesting.” 


So for this subgroup of order 6, the normalizer is strictly bigger than the subgroup, but still strictly smaller than the whole group 
(and hence not normal in the dihedral group). Trivially, a subgroup is normal in its normalizer: 


Finite Simple Groups 


We saw earlier Sage's permutation group method .is_simple() . Example 15.16 tells us that a group of order 64 is never 
simple. The dicyclic group DiCyclicGroup(16) isa non-abelian group of 64, so we can test this method on this group. It 
turns out this group has many normal subgroups — the list will always contain the trivial subgroup and the group itself, so any 
number exceeding 2 indicates a non-trivial normal subgroup. 


Here is a rather interesting group, one of the 26 sporadic simple groups, known as the Higman-Sims group, HS. The generators 
used below come from the representation on 100 points in web.mat.bham.ac.uk/atlas/v2.0/spor/HS/. Two generators of just order 2 
and order 5 (as you can esily see), generating exactly 44 352 000elements, but no normal subgroups. Amazing. 
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We saw this group earlier in the exercises for Chapter 14 on group actions, where it was the single non-trivial normal subgroup of 
the automorphism group of the Higman-Sims graph, hence its name. 


GAP Console and Interface 


This concludes our exclusive study of group theory, though we will be using groups some in the subsequent sections. As we have 
remarked, much of Sage's computation with groups is performed by the open source program, “Groups, Algorithms, and 
Programming,” which is better know as simply GAP. If after this course you outgrow Sage's support for groups, then learning GAP 
would be your next step as a group theorist. Every copy of Sage includes a copy of GAP and is easy to see which version of GAP is 
included: 


You can interact with GAP in Sage in several ways. The most direct is by creating a permutation group via Sage's gap( ) 
command. 


Now we can use most any GAP command with G , via the convention that most GAP commands expect a group as the first 
argument, and we instead provide the group by using the object-oriented G . syntax. If you consult the GAP documentation 
you will see that Center is a GAP command that expects a group as its lone argument, and Centralizer is a GAP 
command that expects two arguments — a group and then a group element. 


If you use the Sage Notebook interface you can set the first line of a compute cell to %gap and the entire cell will be interpreted 
as if you were interacting directly with GAP. This means you would now use GAP's syntax, which you can see above is slightly 
different than Sage's universal syntax. You can also use the drop-down box at the top of a worksheet, and select gap as the 
system (rather than sage ) and your whole worksheet will be interpreted as GAP commands. Here is one simple example, which 
you should be able to evaluate in your current worksheet. This particular example will not run properly in a Sage Cell in a web 
page version of this section. 


Notice that 


e We do not need to wrap the individual permutations in as many quotation marks as we do in Sage. 

e Assignmentis := not = . If you forget the colon, you will get an error message such as 
Variable: 'G' must have a value 

e A line must end with a semi-colon. If you forget, several lines will be merged together. 


You can get help about GAP commands with a command such as the following, though you will soon see that GAP assumes you 
know a lot more algebra than Sage assumes you know. 


In the command-line version of Sage, you can also use the GAP “console.” Again, you need to use GAP syntax, and you do not 
have many of the conveniences of the Sage notebook. It is also good to know in advance that quit; is how you can leave the 
GAP console and get back to Sage. If you run Sage at the command-line, use the command gap console() to start GAP 
running. 


It is a comfort to know that with Sage you get a complete copy of GAP, installed and all ready to run. However, this is not a tutorial 
on GAP, so consult the documentation available at the main GAP website: www.gap-system.org to learn how to get the most out of 
GAP. 
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15.8: Sage Exercises 


This exercise verifies Theorem 15.13. The commutator subgroup is computed with the permutation group method 

.commutator() . For the dihedral group of order 40, Dy9 ( DihedralGroup(20) in Sage), compute the commutator 
subgroup and form the quotient with the dihedral group. Then verify that this quotient is abelian. Can you identify the quotient 
group exactly (in other words, up to isomorphism)? 


For each possible prime, find all of the distinct Sylow p-subgroups of the alternating group As. Confirm that your results are 
consistent with the Third Sylow Theorem for each prime. We know that As is a simple group. Explain how this would explain 
or predict some aspects of your answers. 


Count the number of distinct elements contained in the union of all the Sylow subgroups you just found. What is interesting 
about this count? 


For the dihedral group D3g¢ (symmetries of a 36-gon) and each possible prime, determine the possibilities for the number of 
distinct Sylow p-subgroups as predicted by the Third Sylow Theorem (Theorem 15.8). Now compute the actual number of 
distinct Sylow p-subgroups for each prime and comment on the result. 


It can be proved that any group with order 72 is not a simple group, using techniques such as those used in the later examples 
in this chapter. Discuss this result in the context of your computations with Sage. 


This exercise verifies Lemma 15.6. Let G be the dihedral group of order 36, Dig. Let H be the one Sylow 3-subgroup. Let K 
be the subgroup of order 6 generated by the two permutations a and b_ given below. First, form a list of the distinct 
conjugates of K by the elements of H, and determine the number of subgroups in this list. Compare this with the index given 
in the statement of the lemma, employing a single (long) statement making use of the .order() , .normalizer() 
and .intersection() methods with G , H and K, only. 


Example 15.19 shows that every group of order 48 has a normal subgroup. The dicyclic groups are an infinite family of non- 
abelian groups with order 4n, which includes the quaternions (the case of n=2). So the permutation group 

DiCyclicGroup(12)_ has order 48. Use Sage to follow the logic of the proof in Example 15.19 and construct a normal 
subgroup in this group. (In other words, do not just ask for a list of the normal subgroups from Sage, but instead trace through 
the implications in the example to arrive at a normal subgroup, and then check your answer.) 


The proofs of the Second and Third Sylow Theorems (Theorem 15.7, Theorem 15.8) employ a group action on sets of Sylow 
p-subgroups, For the Second Theorem, the list is proposed as incomplete and is proved to be all of the Sylow p-subgroups. In 
this exercise we will see how these actions behave, and how they are different when we use different groups acting on the same 
set. 


Construct the six Sylow 5-subgroups of the alternating group As. This will be the set of objects for both of our actions. 
Conjugating one of these Sylow 5-subgroups by an element of As will produce another Sylow 5-subgroup, and so can be used 
to create a group action. For such an action, from each group element form a Sage permutation of the subgroups by numbering 
the six subgroups and using these integers as markers for the subgroups. You will find the Python list method .index( ) 
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very helpful. Now use all of these permutations to generate a permutation group (a subgroup of S¢). Finally, use permutation 
group methods for orbits and stabilisers, etc. to explore the actions. 


For the first action, use all of As as the group. Show that the resulting action is transitive. In other words, there is exactly one 
single orbit. 


For the second action, use just one of the Sylow 5-subgroups as the group. Write the class equation for this action in a format 
that suggests the “congruent to 1 mod p” part of the conclusion of the Third Theorem. 
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CHAPTER OVERVIEW 


16: Rings 
Up to this point we have studied sets with a single binary operation satisfying certain axioms, but we are often more interested in 
working with sets that have two binary operations. For example, one of the most natural algebraic structures to study is the integers 
with the operations of addition and multiplication. These operations are related to one another by the distributive property. If we 
consider a set with two such related binary operations satisfying certain axioms, we have an algebraic structure called a ring. Ina 
ring we add and multiply elements such as real numbers, complex numbers, matrices, and functions. 
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16.2: Sage Exercises 


Define the two rings Z,; and Z2 with the commands R = Integers(ii1) and S = Integers(12) . For eachring, 
use the relevant command to determine: if the ring is finite, if it is commutative, if it is an integral domain and if it is a field. 
Then use single Sage commands to find the order of the ring, list the elements, and output the multiplicative identity (i.e. 1, if 
it exists). 


Define R to be the ring of integers, Z, by executing R = ZZ or R = Integers() . A command like 
R.ideal(4) will create the principal ideal (4). The same command can accept more than one generator, so for example, 
R.ideal(3, 5) will create the ideal {a-3+6-5]|a,b€Z}. Create several ideals of Z with two generators and ask 

Sage to print each as you create it. Explain what you observe and then create code that will test your observation for thousands 

of different examples. 


Create a finite field F of order 81 with F.<t>=FiniteField(34) . 


1. List the elements of F’. 
2. Obtain the generators of F with F.gens() . 
3. Obtain the first generator of F and save itas U with u = F.0 (alternatively, U = F.gen(0) ). 
4. Compute the first 80 powers of U and comment. 
5. The generator you have worked with above is a root of a polynomial over Z3. Obtain this polynomial with 
F.modulus() and use this observation to explain the entry in your list of powers that is the fourth power of the 
generator. 


Build and analyze a quotient ring as follows: 


1.Use P.<z>=Integers(7){]| toconstruct aring P of polynomials in z with coefficients from Z7. 
2.Use K = P.ideal(z\2+z+3) to builda principal ideal K generated by the polynomial z? + z+3. 
3.Use H = P.quotient(K) to build H, the quotient ring of P by K. 

4. Use Sage to verify that H isa field. 

5. As in the previous exercise, obtain a generator and examine the proper collection of powers of that generator. 
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16.3: Rings 
A nonempty set is a ring if it has two closed binary operations, addition and multiplication, satisfying the following conditions. 


1.a+b=b+a fora,bEe R. 

2.(a+b)+c=a+(b+c) fora,b,cER. 

3. There is an element 0 in R such thata+0 =a foralla€c R. 

4, For every element a € R, there exists an element —a in R such that a+(—a) =0. 
5. (ab)c = a(bc) for a, b,c € R. 

6. For a,b,c € R, 


a(b+c) =ab+ac 
(a+b)c =ac+be. 


This last condition, the distributive axiom, relates the binary operations of addition and multiplication. Notice that the first four 
axioms simply require that a ring be an abelian group under addition, so we could also have defined a ring to be an abelian group 
(R, +) together with a second binary operation satisfying the fifth and sixth conditions given above. 


If there is an element 1 € R such that 1 40 and 1a=al =a for each element a € R, we say that R is a ring with unity or 
identity. A ring R for which ab = ba for all a,b in R is called a commutative ring. A commutative ring R with identity is called 
an integral domain if, for every a,b € R such that ab = 0, either a = 0 or b =0. A division ring is a ring R, with an identity, in 
which every nonzero element in R is a unit; that is, for each a € R with a0, there exists a unique element a! such that 
a-ta=aa~! =1. A commutative division ring is called a field. The relationship among rings, integral domains, division rings, 


and fields is shown in Figure 16.1. 


Rings 
Commutative Rings with 
Rings Identity 
Integral Division 
Domains Rings 


ae 


Fields 


Figure 16.1. Types of rings 


Example 16.2 


As we have mentioned previously, the integers form a ring. In fact, Z is an integral domain. Certainly if ab =0 for two 
integers a and b, eithera =0 orb=0. 


Solution 


However, Z is not a field. There is no integer that is the multiplicative inverse of 2, since 1/2 is not an integer. The only 
integers with multiplicative inverses are 1 and —1. 
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Example 16.3 


Under the ordinary operations of addition and multiplication, all of the familiar number systems are rings: 
Solution 


the rationals, Q; the real numbers, IR; and the complex numbers, C. Each of these rings is a field. 


Example 16.4 


We can define the product of two elements a and 6 in Z, by ab (mod n). 
Solution 


For instance, in Zj2, 5-7 =11 (mod 12). This product makes the abelian group Z, into a ring. Certainly Z, is a 
commutative ring; however, it may fail to be an integral domain. If we consider 3-4 =0 (mod 12) in Zig, it is easy to see 
that a product of two nonzero elements in the ring can be equal to zero. 


A nonzero element a in a commutative ring R is called a zero divisor if there is a nonzero element b in R such that ab = 0. In the 
previous example, 3 and 4 are zero divisors in Z}9. 


Example 16.5 


In calculus the continuous real-valued functions on an interval [a,b] form a commutative ring. We add or multiply two 
functions by adding or multiplying the values of the functions. If f(a) = 2 and g(x) = cosz, 


Solution 


then (f + 9)(z) = f(x) +9(e) =22 +cos@ and (fg)(z) = f(2)9(«) = 2? cosa. 


Example 16.6 


The 2 x 2 matrices with entries in R form a ring under the usual operations of matrix addition and multiplication. 


Solution 


This ring is noncommutative, since it is usually the case that AB # BA. Also, notice that we can have AB =0 when neither 
A nor B is zero. 


Example 16.7 


For an example of a noncommutative division ring, let 


el (ee (eek (ass) 
0 1 —1 0 1 O QO -i 


where i? = —1. These elements satisfy the following relations: 


ij =k 
jk 
ki=j 
ji=—k 
kj = —-i 
ik = —j 


Let H consist of elements of the form a+ bi+cj-++dk, where a, b,c, d are real numbers. Equivalently, H can be considered 
to be the set of all 2 x 2 matrices of the form 
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where @ =a+di and 8@=b+ ci are complex numbers. We can define addition and multiplication on H either by the usual 
matrix operations or in terms of the generators 1, i, j, and k: 
(ay +611 + c1j + dik) + (a2 + bei + coj + dok) 
= (a; +a) + (6; + bz)i + (cy +¢2)j + (di + d2)k 


and 
(a1 +byi+ cj +d k) (a2 + beit cj + d2k) =a+6i+yj +k, 

where 

a =—aj,a2g — by bo —C€1 Co —d,dy 

B = a;by + ab; +c,dy —d Co 

Y = a1C2 — by dz + cya + dy by 

6 =ajdy + bic, — cc, bo + dja. 
Solution 


Though multiplication looks complicated, it is actually a straightforward computation if we remember that we just add and 
multiply elements in H like polynomials and keep in mind the relationships between the generators i, j, and k. The ring H is 
called the ring of quaternions. 


To show that the quaternions are a division ring, we must be able to find an inverse for each nonzero element. Notice that 
(a+bi+cj +dk)(a—bi—cj —dk) =a? +b? +c? +d?. 
This element can be zero only if a, b, c, and d are all zero. So if a+bi+cj+dk £0, 


a—bi-—cj—dk ) aa 


(a-+bi+cj + dk) (434 caer 


Proposition 16.8 


Let R be a ring with a, b € R. Then 
1.a0 =0a=0; 
2. a(—b) = (—a)b = —ab; 
3. (—a)(—b) = ab. 
Proof 
To prove (1), observe that 
a0 = a(0 +0) =a +a0; 


hence, a0 =0. Similarly, 0a =O. For (2), we have ab+a(—b) =a(b—b)=a0=0; consequently, —ab = a(—b). 
Similarly, —ab = (—a)b. Part (3) follows directly from (2) since (—a)(—b) = —(a(—b)) = —(—ab) = ab. 


Just as we have subgroups of groups, we have an analogous class of substructures for rings. A subring S of aring R is a subset S 
of R such that S is also a ring under the inherited operations from R. 


Example 16.9 


The ring nZ is a subring of Z. 
Solution 


Notice that even though the original ring may have an identity, we do not require that its subring have an identity. We have the 
following chain of subrings: 


TeEQewec. 
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The following proposition gives us some easy criteria for determining whether or not a subset of a ring is indeed a subring. (We 
will leave the proof of this proposition as an exercise.) 


Proposition 16.10 


Let R be a ring and S a subset of R. Then S is a subring of R if and only if the following conditions are satisfied. 


LSHAO. 
2.rs€S forallr,s€S. 
3.r—s€S forallr,seS. 


Example 16.11 


Let R = M(R) be the ring of 2 x 2 matrices with entries in R. If T' is the set of upper triangular matrices in R; i.e., 


ie » ia,b,ceR}, 
0c 


Solution 


then T is a subring of R. If 


isin 7. 
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16.4: Integral Domains and Fields 


Let us briefly recall some definitions. If R is a commutative ring and r is a nonzero element in R, then r is said to be a zero divisor 
if there is some nonzero element s € R such that rs = 0. A commutative ring with identity is said to be an integral domain if it 
has no zero divisors. If an element a in a ring R with identity has a multiplicative inverse, we say that a@ is a unit. If every nonzero 
element in a ring R is a unit, then R is called a division ring. A commutative division ring is called a field. 


Example 16.12 


If i? = —1, then the set Z[i] ={m-+ni:m,n€ Z} forms a ring known as the Gaussian integers. It is easily seen that the 
Gaussian integers are a subring of the complex numbers since they are closed under addition and multiplication. Let 


a=a+bi beaunit in Z[i].Thena =a—bi is also a unit since if a8 = 1, then af =1. If 8B =c+di, 


Solution 
then 
1 = afGB = (a2 +?) (c? +d?). 
Therefore, a2 +b? must either be 1 or —1; or, equivalently, a+b6i =+1 ora+bi =+. Therefore, units of this ring are +1 


and -+2; hence, the Gaussian integers are not a field. We will leave it as an exercise to prove that the Gaussian integers are an 
integral domain. 


Example 16.13 


The set of matrices 


Solution 


with entries in Z) forms a field. 


Example 16.14 


The set Q(v2) = {a+ bV2:a,be Q} isa field. The inverse of an element a +by/2 in Q(v2) is 


Solution 


We have the following alternative characterization of integral domains. 


Proposition 16.15. Cancellation Law 


Let D be a commutative ring with identity. Then D is an integral domain if and only if for all nonzero elements a € D with 
ab =ac, we haveb=c. 


Proof 
Let D be an integral domain. Then D has no zero divisors. Let ab = ac with a £0. Then a(b—c) =0. Hence, b—c=0 
and b=c. 


Conversely, let us suppose that cancellation is possible in D. That is, suppose that ab = ac implies b = c. Let ab =0. If 
a #0, then ab = a0 or b = 0. Therefore, a cannot be a zero divisor. 


The following surprising theorem is due to Wedderburn. 
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Theorem 16.16 


Every finite integral domain is a field. 


Proof 


Let D be a finite integral domain and D* be the set of nonzero elements of D. We must show that every element in D* has 
an inverse. For each a € D* we can define amap A, : D* — D* by 4,(d) =ad. This map makes sense, because if a 4 0 
and d #0, then ad # 0. The map Q, is one-to-one, since for d,, d) € D*, 


ad, = Xa (di) = Xa(d2) = ad 


implies d; = d2 by left cancellation. Since D* is a finite set, the map A, must also be onto; hence, for some d € D*, 
Aa(d) =ad=1. Therefore, a has a left inverse. Since D is commutative, d must also be a right inverse for a. 
Consequently, D is a field. 


For any nonnegative integer n and any element r in aring R we writer+----+r (n times) as nr. We define the characteristic of 
a ring R to be the least positive integer n such that nr = 0 for all r € R. If no such integer exists, then the characteristic of R is 
defined to be 0. We will denote the characteristic of R by \chrR. 


Example 16.17 


For every prime p, Zp is a field of characteristic p. 
Solution 


By Proposition 3.4, every nonzero element in Z, has an inverse; hence, Z, is a field. If a is any nonzero element in the field, 
then pa = 0, since the order of any nonzero element in the abelian group Z, is p. 


Lemma 16.18 


Let R be a ring with identity. If 1 has order n, then the characteristic of R is n. 


Proof 


If 1 has order n, then 7 is the least positive integer such that n1 = 0. Thus, for all r € R, 


nr =n(1r) = (n1)r =0r =0. 


On the other hand, if no positive n exists such that n1 = 0, then the characteristic of R is zero. 


Theorem 16.19 


The characteristic of an integral domain is either prime or zero. 


Proof 


Let D be an integral domain and suppose that the characteristic of D is n with n £0. If n is not prime, then n = ab, 
where 1<a<n and 1<b<n. By Lemma 16.18 we need only consider the case nl=0O. _ Since 
0 =nl1 = (ab)1 =(a1)(b1) and there are no zero divisors in D, either a1 = 0 or 61 = 0. Hence, the characteristic of D 
must be less than n, which is a contradiction. Therefore, n must be prime. 
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16.5: Ring Homomorphisms and Ideals 


In the study of groups, a homomorphism is a map that preserves the operation of the group. Similarly, a homomorphism between 
rings preserves the operations of addition and multiplication in the ring. More specifically, if R and S are rings, then a ring 
homomorphism is a map ¢: R — S satisfying 


o(a+b) = ¢(a) + (6) 
(ab) = $(a)¢(b) 
for alla, b € R. If 6: RS isa one-to-one and onto homomorphism, then ¢ is called an isomorphism of rings. 


The set of elements that a ring homomorphism maps to 0 plays a fundamental role in the theory of rings. For any ring 
homomorphism ¢ : R + S, we define the kernel of a ring homomorphism to be the set 


ker@={re R: d(r) =O}. 


Example 16.20 


For any integer m we can define a ring homomorphism ¢:Z—Z, by at+a (mod n). This is indeed a ring 
homomorphism, since 


Solution 
o(a+b) =(a+b) (mod n) 
=a (mod n)+b (mod n) 
= $(a) + 6(6) 
and 


g(ab) =ab (mod n) 
=a (mod n)-b (mod n) 


= 9(a)9(6). 


The kernel of the homomorphism ¢ is nZ. 


Example 16.21 


Let Ca, 6] be the ring of continuous real-valued functions on an interval [a, 6] as in Example 16.5. For a fixed a € [a, b], we 
can define a ring homomorphism ¢q : C[a, b] > R by ¢a(f) = f(a). This is a ring homomorphism since 


Solution 


bo(f +9) = (f + 9)(a) = f(a) + 9(@) = ba(f) + ba(9) 
ba(f9) = (f9)(a) = f(a) 9(@) = ba(f)Ga(9)- 


Ring homomorphisms of the type ¢, are called evaluation homomorphisms. 


In the next proposition we will examine some fundamental properties of ring homomorphisms. The proof of the proposition is left 
as an exercise. 


Proposition 16.22 


Let 6: R— S bearing homomorphism. 


1. If R is a commutative ring, then ¢(R) is a commutative ring. 

2. (0) = 

3. Let 1p and 1g be the identities for R and S, respectively. If @ is onto, then d(1r) = 13. 
4. If R is a field and ¢(R) 4 {0}, then $(R) is a field. 
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In group theory we found that normal subgroups play a special role. These subgroups have nice characteristics that make them 
more interesting to study than arbitrary subgroups. In ring theory the objects corresponding to normal subgroups are a special class 
of subrings called ideals. An ideal in aring R is a subring J of R such that if a is in J andr is in R, then both ar and ra are in J; 
that is, rJ CI andIr CTI forallre R. 


Example 16.23 


Every ring R has at least two ideals, {0} and R. These ideals are called 
Solution 


the trivial ideals. 


Let R be a ring with identity and suppose that I is an ideal in R such that 1 is in J. Since for any re R, rl =re€T by the 
definition of an ideal, J = R. 


Example 16.24 


If a is any element in a commutative ring R with identity, then the set 
(a) = {ar:r € R} 

is an ideal in R. 

Solution 


Certainly, (a) is nonempty since both 0 = a0 and a=al are in (a). The sum of two elements in (a) is again in (a) since 
ar+ar' =a(r+r’). The inverse of ar is —ar =a(—r) € (a). Finally, if we multiply an element ar € (a) by an arbitrary 
element s € R, we have s(ar) = a(sr). Therefore, (a) satisfies the definition of an ideal. 


If R is a commutative ring with identity, then an ideal of the form (a) = {ar: r € R} is called a principal ideal. 


Theorem 16.25 


Every ideal in the ring of integers Z is a principal ideal. 


Proof 
The zero ideal {0} is a principal ideal since (0) = {0}. If I is any nonzero ideal in Z, then J must contain some positive 
integer m. There exists a least positive integer n in I by the Principle of Well-Ordering. Now let a be any element in I. 
Using the division algorithm, we know that there exist integers g and r such that 


a=nqt+r 


where 0 <r <n. This equation tells us that r=a—ng€TJI, but r must be 0 since n is the least positive element in J. 
Therefore, a = ng and I = (n). 


Example 16.26 


The set nZ is ideal in the ring of integers. If na is in nZ and b is in Z, 
Solution 


then nab is in nZ as required. In fact, by Theorem 16.25, these are the only ideals of Z. 


Proposition 16.27 


The kernel of any ring homomorphism ¢ : R — S is an ideal in R. 


Proof 
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We know from group theory that ker ¢ is an additive subgroup of R. Suppose that r € R anda c€ ker¢. Then we must 
show that ar and ra are in ker ¢. However, 


P(ar) = Pa) g(r) = 09(r) =0 


and 


Remark 16.28 


In our definition of an ideal we have required that rf C I and Ir CI for all r € R. Such ideals are sometimes referred to as 
two-sided ideals. We can also consider one-sided ideals; that is, we may require only that either rf CI or Ir CI forreR 
hold but not both. Such ideals are called left ideals and right ideals, respectively. Of course, in a commutative ring any ideal 
must be two-sided. In this text we will concentrate on two-sided ideals. 


Theorem 16.29 


Let I be an ideal of R. The factor group R/T is a ring with multiplication defined by 
(r+D(s+1)=rs+I. 


Proof 


We already know that R/T is an abelian group under addition. Let r+J and s+J be in R/I. We must show that the 
product (r+J)(s+I)=rs+I _ is independent of the choice of coset; that is, if r’ €r+J and s’€s+IJ, thenr’s’ 
must be inrs+J. Since r’ €r+TJ, there exists an element a in J such that r’ =r-+a. Similarly, there exists a b € I 
such that s’ = s+. Notice that 


r's' =(r+a)(s+b)=rs+as+rb+ab 


andas+rb+abe€T since I is an ideal; consequently, r’s’ € rs+JI. We will leave as an exercise the verification of the 
associative law for multiplication and the distributive laws. 


The ring R/I in Theorem 16.29 is called the factor or quotient ring. Just as with group homomorphisms and normal subgroups, 
there is a relationship between ring homomorphisms and ideals. 


Theorem 16.30 


Let I be an ideal of R. The map ¢: R— R/I defined by ¢(r) =r+I is aring homomorphism of R onto R/I with kernel I. 


Proof 


Certainly ¢: R > R/T is a surjective abelian group homomorphism. It remains to show that ¢ works correctly under ring 
multiplication. Let r and s be in R. Then 


$(r)O(s) =(r+1)(s+1) =rs+I=9(rs), 


which completes the proof of the theorem. 


The map ¢: R-> R/T is often called the natural or canonical homomorphism. In ring theory we have isomorphism theorems 
relating ideals and ring homomorphisms similar to the isomorphism theorems for groups that relate normal subgroups and 
homomorphisms in Chapter 11. We will prove only the First Isomorphism Theorem for rings in this chapter and leave the proofs of 
the other two theorems as exercises. All of the proofs are similar to the proofs of the isomorphism theorems for groups. 
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Theorem 16.31. First Isomorphism Theorem 


Let»: R— S bearing homomorphism. Then ker w is an ideal of R. If 6: R — R/kerw is the canonical homomorphism, 
then there exists a unique isomorphism 7: R/ ker y — (R) such that » = nd. 


Proof 


Let kK =kery. By the First Isomorphism Theorem for groups, there exists a well-defined group homomorphism 
n: R/K > (R) defined by n(r+ K)=7(r) for the additive abelian groups R and R/K. To show that this is a ring 
homomorphism, we need only show that n((r+ K)(s+K))=n(r+K)n(s+K); but 


n((r+K)(s+K)) =n(rs+ kK) 
¥(rs) 

¥(r)¥(s) 
n(r+ K)n(s+K). 


Theorem 16.32. Second Ilsomorphism Theorem 


Let I be a subring of a ring R and J an ideal of R. Then IQ J is an ideal of I and 
T/InJ=(1+J)/J. 


Theorem 16.33. Third lsomorphism Theorem 


Let R be aring and I and J be ideals of R where J C I. Then 


R/J 


R/I= Ta 


Theorem 16.34. Correspondence Theorem 


Let I be an ideal of a ring R. Then S + S/T is a one-to-one correspondence between the set of subrings S' containing I and 
the set of subrings of R/I. Furthermore, the ideals of R containing I correspond to ideals of R/T. 


This page titled 16.5: Ring Homomorphisms and Ideals is shared under a GNU Free Documentation License 1.3 license and was authored, 
remixed, and/or curated by Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and 
standards of the LibreTexts platform; a detailed edit history is available upon request. 
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16.6: Maximal and Prime Ideals 


In this particular section we are especially interested in certain ideals of commutative rings. These ideals give us special types of 
factor rings. More specifically, we would like to characterize those ideals J of a commutative ring R such that R/TI is an integral 
domain or a field. 

A proper ideal M of a ring R is a maximal ideal of R if the ideal M is not a proper subset of any ideal of R except R itself. That 
is, M is a maximal ideal if for any ideal J properly containing M, J =R. The following theorem completely characterizes 
maximal ideals for commutative rings with identity in terms of their corresponding factor rings. 


Theorem 16.35 


Let R be a commutative ring with identity and M an ideal in R. Then M is a maximal ideal of R if and only if R/M is a field. 


Proof 


Let M be a maximal ideal in R. If R is a commutative ring, then R/M must also be a commutative ring. Clearly, 1+ 
acts as an identity for R/M. We must also show that every nonzero element in R/M has an inverse. If a+M isa 
nonzero element in R/M,thena ¢ M. Define I to be the set {ra+m:r€ Randm € M}. We will show that I is an 
ideal in R. The set J is nonempty since 0a +0=0 isin I. Ifrya+m, andrza+mz are two elements in J, then 


(ria +m) —(r2a+ m2) = (71 —172)a+ (mM, — M2) 


is in I. Also, for any r € & it is true that rf CI; hence, J is closed under multiplication and satisfies the necessary 
conditions to be an ideal. Therefore, by Proposition 16.10 and the definition of an ideal, I is an ideal properly containing 
M. Since M is a maximal ideal, J = R; consequently, by the definition of J there must be an m in M and an element b in 
R such that 1 =ab+™m. Therefore, 


1+ M =ab+M=ba+M =(a+M)(b+M). 


Conversely, suppose that M is an ideal and R/M is a field. Since R/M is a field, it must contain at least two elements: 
0+M=M and1+WM. Hence, M is a proper ideal of R. Let I be any ideal properly containing M/. We need to show 
that J = R. Choose a in I but not in M. Since a+ M is a nonzero element in a field, there exists an element b+ M in 
R/M such that (a+ M)(b+M)=ab+M=1+M. Consequently, there exists an element m€ M_ such that 
ab+m =1 and 1 is in TI. Therefore, r1 =r € I for all r € R. Consequently, J = R. 


Example 16.36 


Let pZ be an ideal in Z, where p is prime. 
Solution 


Then pZ is a maximal ideal since Z/pZ = Z, is a field. 


A proper ideal P in a commutative ring R is called a prime ideal if whenever ab € P, then eithera € P orbe€ P.® 


It is possible to define prime ideals in a noncommutative ring. See [1] or [3]. 


Example 16.37 


It is easy to check that the set P = {0, 2,4, 6, 8, 10 }is an ideal in Zip. 
Solution 


This ideal is prime. In fact, it is a maximal ideal. 
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Proposition 16.38 


Let R be a commutative ring with identity 1, where 140. Then P is a prime ideal in R if and only if R/P is an integral 
domain. 
Proof 


First let us assume that P is an ideal in R and R/P is an integral domain. Suppose that ab € P. Ifa+P andb+P are 
two elements of R/P such that (a+P)(b+P)=0+P=P, then eithera+P=P orb+P=P. This means that 
either a is in P or b is in P, which shows that P must be prime. 


Conversely, suppose that P is prime and 
(a+ P)(b+ P) =ab+ P=0+P=P. 


Then ab € P. If a¢ P, then b must be in P by the definition of a prime ideal; hence, b+ P=0+P and R/P is an 
integral domain. 


Example 16.39 


Every ideal in Z is of the form nZ. The factor ring Z/nZ = Z,, is an integral domain only when n is prime. It is actually a 
field. 


Solution 


Hence, the nonzero prime ideals in Z are the ideals pZ, where p is prime. This example really justifies the use of the word 
“prime” in our definition of prime ideals. 


Since every field is an integral domain, we have the following corollary. 


Corollary 16.40 


Every maximal ideal in a commutative ring with identity is also a prime ideal 


Historical Note 


Amalie Emmy Noether, one of the outstanding mathematicians of the twentieth century, was born in Erlangen, Germany in 1882. 
She was the daughter of Max Noether (1844-1921), a distinguished mathematician at the University of Erlangen. Together with 
Paul Gordon (1837-1912), Emmy Noether's father strongly influenced her early education. She entered the University of Erlangen 
at the age of 18. Although women had been admitted to universities in England, France, and Italy for decades, there was great 
resistance to their presence at universities in Germany. Noether was one of only two women among the university's 986 students. 
After completing her doctorate under Gordon in 1907, she continued to do research at Erlangen, occasionally lecturing when her 
father was ill. 


Noether went to Gottingen to study in 1916. David Hilbert and Felix Klein tried unsuccessfully to secure her an appointment at 
Gottingen. Some of the faculty objected to women lecturers, saying, “What will our soldiers think when they return to the 
university and are expected to learn at the feet of a woman?” Hilbert, annoyed at the question, responded, “Meine Herren, I do not 
see that the sex of a candidate is an argument against her admission as a Privatdozent. After all, the Senate is not a bathhouse.” At 
the end of World War I, attitudes changed and conditions greatly improved for women. After Noether passed her habilitation 
examination in 1919, she was given a title and was paid a small sum for her lectures. 


In 1922, Noether became a Privatdozent at Gottingen. Over the next 11 years she used axiomatic methods to develop an abstract 
theory of rings and ideals. Though she was not good at lecturing, Noether was an inspiring teacher. One of her many students was 
B. L. van der Waerden, author of the first text treating abstract algebra from a modern point of view. Some of the other 
mathematicians Noether influenced or closely worked with were Alexandroff, Artin, Brauer, Courant, Hasse, Hopf, Pontryagin, 
von Neumann, and Weyl. One of the high points of her career was an invitation to address the International Congress of 
Mathematicians in Zurich in 1932. In spite of all the recognition she received from her colleagues, Noether's abilities were never 
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recognized as they should have been during her lifetime. She was never promoted to full professor by the Prussian academic 
bureaucracy. 


In 1933, Noether, who was Jewish, was banned from participation in all academic activities in Germany. She emigrated to the 
United States, took a position at Bryn Mawr College, and became a member of the Institute for Advanced Study at Princeton. 
Noether died suddenly on April 14, 1935. After her death she was eulogized by such notable scientists as Albert Einstein. 


This page titled 16.6: Maximal and Prime Ideals is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, 
and/or curated by Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of 
the LibreTexts platform; a detailed edit history is available upon request. 
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16.7: An Application to Software Design 


The Chinese Remainder Theorem is a result from elementary number theory about the solution of systems of simultaneous 
congruences. The Chinese mathematician Sun-tsi wrote about the theorem in the first century A.D. This theorem has some 
interesting consequences in the design of software for parallel processors. 


Lemma 16.41 


Let m and n be positive integers such that gcd(m,n) = 1. Then for a, b € Z the system 


x=a (mod m) 
xz=b (mod n) 


has a solution. If x1 and x2 are two solutions of the system, then x} = 22 (mod mn). 


Proof 


The equation z =a (mod m) has a solution since a+ km satisfies the equation for all k € Z. We must show that there 
exists an integer k such that 


a+kjm=b (mod n). 
This is equivalent to showing that 
kim =(b—a) (mod n) 
has a solution for kj. Since m and n are relatively prime, there exist integers s and t such that ms+nt=1. 
Consequently, 
(b—a)ms = (b—a) — (b—a)nt, 
or 
[((b—a)s]m =(b—a) (mod n). 
Now let ky = (b—a)s. 
To show that any two solutions are congruent modulo mn, let c; and cz be two solutions of the system. That is, 
c¢; =a (mod m) 
c, =b (mod n) 
for 2 =1,2. Then 


c2=c, (mod m) 


co =c, (mod n). 


Therefore, both m and n divide cy — cy. Consequently, cp =c,; (mod mn). 


Example 16.42 


Let us solve the system 


Solution 


Using the Euclidean algorithm, we can find integers s and t such that 4s+ 5¢ =1. Two such integers are s =4 andt =—3. 
Consequently, 


z=atkm=3+4k, =3+4[(5 —4)4] =19. 
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Theorem 16.43. Chinese Remainder Theorem 


Let n1, n2,..., nx be positive integers such that gcd(n;,n;) =1 fori #7. Then for any integers aj,...,ax,the system 


xz =a, (mod nj) 
Z=az (mod nz) 


xz =axz (mod ng) 
has a solution. Furthermore, any two solutions of the system are congruent modulo n1n2 - -- Ng. 


Proof 


We will use mathematical induction on the number of equations in the system. If there are k =2 equations, then the 
theorem is true by Lemma 16.41 Now suppose that the result is true for a system of & equations or less and that we wish to 
find a solution of 


xz =a, (mod nj) 
a, (mod nz) 


wv 


L=agy1 (mod ng41). 


Considering the first k equations, there exists a solution that is unique modulo nj ---nxz, say a. Since nj --- nz and ng41 
are relatively prime, the system 


xz =a (mod nyz---ng) 
© =Api1 (mod nz1) 


has a solution that is unique modulo n; ... x41 by the lemma. 


Example 16.44 


Let us solve the system 


Gy Gk Gr 


Solution 


From Example 16.42 we know that 19 is a solution of the first two congruences and any other solution of the system is 
congruent to 19 (mod 20). Hence, we can reduce the system to a system of three congruences: 


x =19 (mod 20) 
z=1 (mod 9) 
z=5 (mod 7). 


Solving the next two equations, we can reduce the system to 


z=19 (mod 180) 
xz=5 (mod 7). 


Solving this last system, we find that 19 is a solution for the system that is unique up to modulo 1260. 


One interesting application of the Chinese Remainder Theorem in the design of computer software is that the theorem allows us to 
break up a calculation involving large integers into several less formidable calculations. A computer will handle integer 
calculations only up to a certain size due to the size of its processor chip, which is usually a 32 or 64-bit processor chip. For 
example, the largest integer available on a computer with a 64-bit processor chip is 


GNU Free Documentation License 16.7.2 https ://math.libretexts.org/@go/page/81163 


Oibretexts: 


Larger processors such as 128 or 256-bit have been proposed or are under development. There is even talk of a 512-bit processor 
chip. The largest integer that such a chip could store with be 2°11 1, which would be a 154 digit number. However, we would 
need to deal with much larger numbers to break sophisticated encryption schemes. 


263 _ 1 = 9,223,372,036,854,775,807. 


Special software is required for calculations involving larger integers which cannot be added directly by the machine. By using the 
Chinese Remainder Theorem we can break down large integer additions and multiplications into calculations that the computer can 
handle directly. This is especially useful on parallel processing computers which have the ability to run several programs 
concurrently. 


Most computers have a single central processing unit (CPU) containing one processor chip and can only add two numbers at a time. 
To add a list of ten numbers, the CPU must do nine additions in sequence. However, a parallel processing computer has more than 
one CPU. A computer with 10 CPUs, for example, can perform 10 different additions at the same time. If we can take a large 
integer and break it down into parts, sending each part to a different CPU, then by performing several additions or multiplications 
simultaneously on those parts, we can work with an integer that the computer would not be able to handle as a whole. 


Example 16.45 


Suppose that we wish to multiply 2134 by 1531. 
Solution 
We will use the integers 95, 97, 98, and 99 because they are relatively prime. We can break down each integer into four parts: 


2134 =44 (mod 95) 
2134 =0 (mod 97) 

2134 =76 (mod 98) 
2134 =55 (mod 99) 


and 
1531=11 (mod 95) 
1531=76 (mod 97) 
1531 =61 (mod 98) 
1531 =46 (mod 99) 


Multiplying the corresponding equations, we obtain 


2134-1531 =44-11=9 (mod 95) 
2134-1531 =0-76=0 (mod 97) 
2134-1531 =76-61=30 (mod 98) 
2134-1531 =55-46=55 (mod 99). 


Each of these four computations can be sent to a different processor if our computer has several CPUs. By the above 
calculation, we know that 2134 -1531is a solution of the system 


z=9 (mod 95) 
z=0 (mod 97) 
xz =30 (mod 98) 
xz =55 (mod 99). 


The Chinese Remainder Theorem tells us that solutions are unique up to modulo 95 - 97-98-99 = 89,403,930. Solving this 
system of congruences for z tells us that 2134-1531 = 3,267,154. 


The conversion of the computation into the four subcomputations will take some computing time. In addition, solving the 
system of congruences can also take considerable time. However, if we have many computations to be performed on a 
particular set of numbers, it makes sense to transform the problem as we have done above and to perform the necessary 
calculations simultaneously. 
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16.8: Reading Questions 


What is the fundamental difference between groups and rings? 
Give two characterizations of an integral domain. 

Provide two examples of fields, one infinite, one finite. 

Who was Emmy Noether? 


Speculate on a computer program that might use the Chinese Remainder Theorem to speed up computations with large 
integers. 


g 
P 
E 
E 
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16.9: Exercises 


Which of the following sets are rings with respect to the usual operations of addition and multiplication? If the set is a ring, is it 
also a field? 


1. 7Z 

2. Zig 

3. Q(./2 ) = {a+ b/2: a,b € Q} 

4. Q(/2, /3) = {a+b/2+c/3+d6: a,b, c,d € Q} 
5. Z[/3] = {a+ bV/3: a,b € Z} 

6. R={a+bv3: a,b € Q} 

7. Z[i] ={a+bi: a,b € Zandi? =—-1} 

8. Qx/3) = {a+ b\/3 + cV/9 : a, b,c € Q} 


Let R be the ring of 2 x 2 matrices of the form 


Gab 


where a, b € R. Show that although R is a ring that has no identity, we can find a subring S of R with an identity. 


List or characterize all of the units in each of the following rings. 


1. Zio 

2. Z12 

3. Zr 

4. M2(Z), the 2 x 2 matrices with entries in Z 
5. My (Z2), the 2 x 2 matrices with entries in Z2 


Find all of the ideals in each of the following rings. Which of these ideals are maximal and which are prime? 


1. Zig 
2. Za5 
3. M2(IR), the 2 x 2 matrices with entries in R 
4. M(Z), the 2 x 2 matrices with entries in Z 


5.Q 


For each of the following rings R with ideal J, give an addition table and a multiplication table for R/T. 


1.R=Z andI =6Z 
2. R=Zy,2 and I = {0,3, 6,9} 
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Find all homomorphisms ¢ : Z/6Z > Z/15Z. 

Prove that R is not isomorphic to C. 

Prove or disprove: The ring Q(/2 ) = {a + bv/2: a,b € Q} is isomorphic to the ring Q(./3) = {a+ b/3: a,b € Q}. 
What is the characteristic of the field formed by the set of matrices 


PAE -C DIC 9) 


with entries in Z2? 


Define a map ¢ : C + M,(R) by 
a 6b 
o(a +bi) = ( ) : 
—b a 
Show that ¢ is an isomorphism of C with its image in My(R). 


+ #878 :B 


Prove that the Gaussian integers, Z[7], are an integral domain. 


Prove that Z[v/3i] ={a+bV/3i:a,b € Z} is an integral domain. 


Solve each of the following systems of congruences. 


1. 


8 8 
II] 


8 8 8 
II] 


Ill 
AN RN TOW ON 


x 
Be 
Be 
xz 


GNU Free Documentation License 16.9.2 https ://math.libretexts.org/@go/page/81165 


Oibretexts: 


xz =3 (mod 5) 
z=0 (mod 8) 
x=1 (mod 11) 
z=5 (mod 13) 


Use the method of parallel computation outlined in the text to calculate 2234+ 4121 by dividing the calculation into four 
separate additions modulo 95, 97, 98, and 99. 


Explain why the method of parallel computation outlined in the text fails for 2134 - 1531 if we attempt to break the calculation 
down into two smaller calculations modulo 98 and 99. 


If R is a field, show that the only two ideals of R are {0} and R itself. 


Let a be any element in a ring R with identity. Show that (—1)a = —a. 


E 
E 
fe 
= 


Let ¢: RS bearing homomorphism. Prove each of the following statements. 


1. If R is a commutative ring, then ¢(R) is a commutative ring. 

2. (0) =0. 

3. Let 1p and 1g be the identities for R and S, respectively. If ¢ is onto, then @(1z) = 15. 
4. If R isa field and ¢(R) £0, then $(R) is a field. 


Prove that the associative law for multiplication and the distributive laws hold in R/T. 


Prove the Second Isomorphism Theorem for rings: Let I be a subring of a ring R and J an ideal in R. Then 17 J is an ideal 
in I and 


T/INnJ2I+Jd/J. 


Prove the Third Isomorphism Theorem for rings: Let R be a ring and I and J be ideals of R, where J C J. Then 


R/J 


R/I= Ts 
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Prove the Correspondence Theorem: Let I be an ideal of a ring R. Then S — S/T is a one-to-one correspondence between the 
set of subrings S containing I and the set of subrings of R/I. Furthermore, the ideals of R correspond to ideals of R/T. 


Let R be aring and S a subset of R. Show that S$ is a subring of R if and only if each of the following conditions is satisfied. 


L SAO. 
2.rs€S forallr,s€S. 
3.r—s€S forallr,se S. 


Let R be a ring with a collection of subrings {R.}. Prove that () Ry is a subring of R. Give an example to show that the 
union of two subrings is not necessarily a subring. 


Let {Za }aea bea collection of ideals in a ring R. Prove that () 
and I» are ideals in R, then I; UJ may not be an ideal. 


acd Lo is also an ideal in R. Give an example to show that if 1, 


Let R be an integral domain. Show that if the only ideals in R are {O} and R itself, R must be a field. 


Let R be a commutative ring. An element a in R is nilpotent if a” =0 for some positive integer n. Show that the set of all 
nilpotent elements forms an ideal in R. 


Ating R is a Boolean ring if for every a € R, a =a. Show that every Boolean ring is a commutative ring. 


Let R be a ring, where a? =a foralla € R. Prove that R must be a commutative ring. 


Let R be a ring with identity 1p and S a subring of R with identity 1g. Prove or disprove that 1p = 1g. 


If we do not require the identity of a ring to be distinct from 0, we will not have a very interesting mathematical structure. Let 
R be aring such that 1 = 0. Prove that R = {0}. 


E 
E 
= 
E 
x 
fr 
f= 
E 
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Let R be a ring. Define the center of R to be 
Z(R)={ae R:ar=raforallr ce R}. 


Prove that Z(R) is a commutative subring of R. 


Let p be prime. Prove that 
Zp) = {a/b: a,b € Zand ged(b, p) = 1} 


is aring. The ring Z,) is called the ring of integers localized at p. 


Prove or disprove: Every finite integral domain is isomorphic to Zp. 


Let R be a ring with identity. 


1. Let u be a unit in R. Define amap i, : R-> R by r++ uru!. Prove that i, is an automorphism of R. Such an 
automorphism of R is called an inner automorphism of R. Denote the set of all inner automorphisms of R by \inn(R). 

2. Denote the set of all automorphisms of R by \aut(R). Prove that \inn(R) is a normal subgroup of \aut(R). 

3. Let U(R) be the group of units in R. Prove that the map 


¢@: U(R) > \inn(R) 
defined by u +> i, is ahomomorphism. Determine the kernel of ¢. 


4. Compute \aut(Z), \inn(Z), and U(Z). 


Let R and S be arbitrary rings. Show that their Cartesian product is a ring if we define addition and multiplication in R x S' by 


ila 
2 


r,s) +(r',s')=(rt+r',s+s') 
r,s)(r', s') =(rr’, ss’) 


An element z in a ring is called an idempotent if x? =. Prove that the only idempotents in an integral domain are 0 and 1. 
Find a ring with a idempotent z not equal to 0 or 1. 


Let gcd(a, n) =d and gcd(b, d) £1. Prove that az =b (mod n) does not have a solution. 


iB eB =: :B 


The Chinese Remainder Theorem for Rings 


Let R be aring and J and J be ideals in R such that 7+ J = R. 


1. Show that for any r and s in R, the system of equations 


i 
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z=r (mod I) 
z=s (mod J) 


has a solution. 


2. In addition, prove that any two solutions of the system are congruent modulo IN J. 
3. Let I and J be ideals in a ring R such that [+ J=R. Show that there exists a ring isomorphism 


R/(IN J) &R/Ix R/J. 


This page titled 16.9: Exercises is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or curated by 
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16.10: Programming Exercise 


Write a computer program implementing fast addition and multiplication using the Chinese Remainder Theorem and the 
method outlined in the text. 


This page titled 16.10: Programming Exercise is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or 
curated by Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the 
LibreTexts platform; a detailed edit history is available upon request. 
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16.10: Sage 


Rings are very important in your study of abstract algebra, and similarly, they are very important in the design and use of Sage. 
There is a lot of material in this chapter, and there are many corresponding commands in Sage. 


Creating Rings 
Here is a list of various rings, domains and fields you can construct simply. 


1. Integers() , ZZ : the integral domain of positive and negative integers, Z. 

2. Integers(n) : the integers mod n, Z,. A field when n is prime, but just a ring for composite n. 

3. QQ : the field of rational numbers, Q. 

4. RR, CC : the field of real numbers and the field of complex numbers, R, C. It is impossible to create every real number 
inside a computer, so technically these sets do not behave as fields, but only give a good imitiation of the real thing. We say 
they are inexact rings to make this point. 

5. QuadraticField(n) : the field formed by combining the rationals with a solution to the polynomial equation 
z? —n=0. The notation in the text is Q[,/n]. A functional equivalent can be made with the syntax QQ[sgrt(n)] . Note 
that n can be negative. 

6. CyclotomicField(n) : the field formed by combining the rationals with the solutions to the polynomial equation 
z”—-1=0. 

7. QQbar : the field formed by combining the rationals with the solutions to every polynomial equation with integer 
coefficients. This is known as a the field of algebraic numbers, denoted as \(\overline 


| ParseError: invalid DekiScript (click for details) 


\text{.}\) 
8 FiniteField(p) : fora prime p, the field of integers Z,. 
If you print a description of some of the above rings, you will sometimes see a new symbol introduced. Consider the following 
example: 


Here Number Field describes an object generally formed by combining the rationals with another number (here \/7). “a” is a 
new symbol which behaves as a root of the polynomial z? —7. We do not say which root, /7 or —/7, and as we understand the 
theory better we will see that this does not really matter. 


We can obtain this root as a generator of the number field, and then manipulate it. First squaring root yields 7. Notice that 
root printsas a . Notice, too, that computations with root behave as if it was either root of x” —7, and results print using 
a. 


This can get a bit confusing, inputing computations with root and getting output in terms of a . Fortunately, there is a better 
way. Consider the following example: 


With the syntax F.<b> wecan create the field F along with specifying a generator 6 using a name of our choosing. Then 
computations can use 5 in both input and output as a root of x? — 7. 


Here are three new rings that are best created using this new syntax. 


1. F.<a> = FiniteField(pn) : We will later have a theorem that tells us that finite fields only exist with orders equal to 
to a power of a prime. When the power is larger than 1, then we need a generator, here givenas a . 

2. P.<x>=R[] : the ring of all polynomials in the variable x , with coefficients from the ring R . Notice that R can be any 
ring, so this is a very general construction that uses one ring to form another. See an example below. 

3. Q.<r,s,t> = QuaternionAlgebra(n, m) :the rationals combined with indeterminates + , S and t_ such that 
r? =n, s* =m andt=rs =~—sr. This isa generalization of the quaternions described in this chapter, though over the 
rationals rather than the reals, so it is an exact ring. Notice that this is one of the few noncommutative rings in Sage. The 
“usual” quaternions would be constructed with Q.<I,J,K> = QuaternionAlgebra(-1, -1) . (Notice that using 

I here is not a good choice, because it will then clobber the symbol I used for complex numbers.) 


GNU Free Documentation License 16, 10.1 https ://math.libretexts.org/@go/page/81168 


Oibretexts: 


Syntax specifying names for generators can be used for many of the above rings as well, such as demonstrated above for quadratic 
fields and below for cyclotomic fields. 


Properties of Rings 


The examples below demonstrate how to query certain properties of rings. If you are playing along, be sure to execute the first 
compute cell to define the various rings involved in the examples. 


Exact versus inexact. 
Finite versus infinite. 
Integral domain? 
Field? 
Commutative? 
Characteristic. 


Additive and multiplicative identities print like you would expect, but notice that while they may print identically, they could be 
different because of the ring they live in. 


There is some support for subrings. For example, Q and S are extensions of the rationals, while F is totally distinct from the 
rationals. 


Not every element of a ring may have a multiplicative inverse, in other words, not every element has to be a unit (unless the ring is 
a field). It would now be good practice to check if an element is a unit before you try computing its inverse. 


Quotient Structure 


Ideals are the normal subgroups of rings and allow us to build “quotients” — basically new rings defined on equivalence classes of 
elements of the original ring. Sage support for ideals is variable. When they can be created, there is not always a lot you can do 
with them. But they work well in certain very important cases. 


The integers, Z, have ideals that are just multiples of a single integer. We can create them with the .ideal() method or just by 
wrting a scalar multiple of ZZ . And then the quotient is isomorphic to a well-understood ring. (Notice that I is a bad name for 
an ideal if we want to work with complex numbers later.) 


We might normally be more careful about the last statement. The quotient is a set of equivalence classes, each infinite, and 
certainly not a single integer. But the quotient is isomorphic to Z4, so Sage just makes this identification. 


Notice that the construction of the quotient ring has created a new generator, converting y (y)to ybar (y). We can override 
this as before with the syntax demonstrated below. 


So from a quotient of an infinite ring and an ideal (which is also a ring), we create a field, which is finite. Understanding this 
construction will be an important theme in the next few chapters. To see how remarkable it is, consider what happens with just one 
little change. 


There are a few methods available which will give us properties of ideals. In particular, we can check for prime and maximal ideals 
in rings of polynomials. Examine the results above and below in the context of Theorem 16.35. 


The fact that M isa prime ideal is verification of Corollary 16.40. 


Ring Homomorphisms 


When Sage is presented with 3 + 4/3 , how does it know that 3 is meant to be an integer? And then to add it to a rational, how 
does it know that we really want to view the computation as 3/1 + 4/3? This is really easy for you and me, but devilishly hard for a 
program, and you can imagine it getting ever more complicated with the many possible rings in Sage, subrings, matrices, etc. Part 
of the answer is that Sage uses ring homomorphisms to “translate” objects (numbers) between rings. 


We will give an example below, but not pursue the topic much further. For the curious, reading the Sage documentation and 
experimenting would be a good exercise. 
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So phi is a homomorphism (“morphism”) that converts integers (the domain is ZZ ) into rationals (the codomain is QQ ), 
whose parent is a set of homomorphisms that Sage calls a “homset.” Even though a and b both print as 3 , which is 
indistinguishable to our eyes, the parents of a and b are different. Yet the numerical value of the two objects has not changed. 


This page titled 16.10: Sage is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or curated by 
Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the LibreTexts 
platform; a detailed edit history is available upon request. 
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CHAPTER OVERVIEW 


17: Polynomials 


Most people are fairly familiar with polynomials by the time they begin to study abstract algebra. When we examine polynomial 
expressions such as 


we have a pretty good idea of what p(z) +(x) and p(«)q(x) mean. We just add and multiply polynomials as functions; that is, 


(p+q)(x) =p(x)+q(z) 
= (2? —32 +2) + (3x? — 62 +5) 
=2°+327-92+7 


and 


(pq)(x) = p(x)q(z) 
= (x? — 32 4+ 2)(3x? —62 +5) 
= 32° — 624 — 423 +242? —272 +10. 
It is probably no surprise that polynomials form a ring. In this chapter we shall emphasize the algebraic structure of polynomials by 
studying polynomial rings. We can prove many results for polynomial rings that are similar to the theorems we proved for the 
integers. Analogs of prime numbers, the division algorithm, and the Euclidean algorithm exist for polynomials. 
17.1: Polynomial Rings 
17.2: The Division Algorithm 
17.3: Irreducible Polynomials 
17.4: Reading Questions 
17.5; Exercises 
17.6: Additional Exercises- Solving the Cubic and Quartic Equations 
17.7: Sage 
17.8: Sage Exercises 
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17.1: Polynomial Rings 
Throughout this chapter we shall assume that R is a commutative ring with identity. Any expression of the form 
f(x) =o ajat = a9 + aya +022? +--+ +an2", 
i=0 


where a; € R and a, £0, is called a polynomial over R with indeterminate x. The elements ao, a1,...,@n are called the 
coefficients of f. The coefficient a, is called the leading coefficient. A polynomial is called monic if the leading coefficient is 1. If 
n is the largest nonnegative number for which a, #0, we say that the degree of f is n and write deg f(x) =n. If no such n 
exists—that is, if f =O is the zero polynomial—then the degree of f is defined to be —coo. We will denote the set of all 
polynomials with coefficients in a ring R by R[x]. Two polynomials are equal exactly when their corresponding coefficients are 
equal; that is, if we let 


p(x) =ap t+ ayr+--++an2” 
q(z) =bo tht +--+ +bn2™, 
then p(az) = q(a) if and only if a; =}; for allz > 0. 


To show that the set of all polynomials forms a ring, we must first define addition and multiplication. We define the sum of two 
polynomials as follows. Let 


p(z) =ao +ayz+++++an2” 
q(x) =bo + bia +--+ +bnz™. 


Then the sum of p(x) and q(x) is 
p(x) +(x) =co tere +--+", 

where c; =a; +0; for each i. We define the product of p(x) and q(x) to be 

p(x)q(x) =co tee +++ +emine™”, 
where 

i 

G= S> andj, = aod; +a, b;-1 ++ ++ +a;-1b1 + ajbo 
k=0 


for each 2. Notice that in each case some of the coefficients may be zero. 


Suppose that 


p(x) =3+02 + 0x? +223 +024 
and 
q(z) =2+02—2? +023 +427 
are polynomials in Z[«]. If the coefficient of some term in a polynomial is zero, then we usually just omit that term. 
Solution 
In this case we would write p(z) =3+2a° and q(x) =2—2x?+4a*. The sum of these two polynomials is 
p(z)+q(z) =5—22 +227 +424. 


The product, 


p(x)q(x) = (3 +2a°)(2—2? + 42*) = 6 — 32? + 40° +1204 — 22° +82", 
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can be calculated either by determining the c;s in the definition or by simply multiplying polynomials in the same way as we 
have always done. 


Let 


p(x) =3+32° and = q(x) =4 +. 4a? +424 
be polynomials in Z19[2]. 
Solution 


The sum of p(a) and q(x) is 7 +42? +323 +4a*. The product of the two polynomials is the zero polynomial. This example 
tells us that we can not expect R[z] to be an integral domain if R is not an integral domain. 


Let R be a commutative ring with identity. Then R[x] is a commutative ring with identity. 


Proof 


Our first task is to show that R[a] is an abelian group under polynomial addition. The zero polynomial, f(x) =0, is the 
additive identity. Given a polynomial p(x)= 5 jy a:z’, the inverse of p(x) is easily verified to be 
—p(x) = yj (—ai)2’ = — 7-9 aiz’. Commutativity and associativity follow immediately from the definition of 
polynomial addition and from the fact that addition in R is both commutative and associative. 


To show that polynomial multiplication is associative, let 


p(x) = Sy aiz’, 
=O) 

ale) => >be", 
= 


P . 
He) = yy Ge 
i=0 


Then 
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(p(x) 4(@)]r() -|(5 py v2) (x0) (Ze) 
Eo) ]e-) 
EE E~ ‘ au] 
Can 
) Bele) 
(Ee) [() (ES) 


= p(z)la(z)r(z)] 


The commutativity and distribution properties of polynomial multiplication are proved in a similar manner. We shall leave 
the proofs of these properties as an exercise. 


i i 
WNAE AE 

2 

8 


Proposition 17.4 


Let p(x) and q(x) be polynomials in R{x], where R is an integral domain. Then deg p(x) + deg q(x) = deg(p(x)q(z)). 
Furthermore, R[«] is an integral domain. 


Proof 


Suppose that we have two nonzero polynomials 
p(x) =Amz™ +---+a1z% +a 
and 
q(x) =b,2" +--+ +b x +b 


with dm #0 and b, #0. The degrees of p(x) and q(x) are m and n, respectively. The leading term of p(x)q(x) is 
Qmb,z™*”, which cannot be zero since R is an integral domain; hence, the degree of p(x)g(z) is m+n, and 
p(z)q(z) £0. Since p(w) #0 and q(x) #0 imply that p(x)q(x) #0, we know that R[z] must also be an integral 
domain. 


We also want to consider polynomials in two or more variables, such as x? — 3ay + 2y?. Let R be aring and suppose that we are 
given two indeterminates « and y. Certainly we can form the ring (R[x])[y].It is straightforward but perhaps tedious to show that 
(R[x])[y] = R([y])[x].We shall identify these two rings by this isomorphism and simply write R[z, y]. The ring R[x, y] is called 
the ring of polynomials in two indeterminates x and y with coefficients in R. We can define the ring of polynomials in n 


indeterminates with coefficients in R similarly. We shall denote this ring by R[z1,22,..., Lp]. 


Let R be a commutative ring with identity and a € R. Then we have a ring homomorphism ¢, : R[x] + R defined by 


a(p(z)) = p(a) =ana” +---+a,a+a9, 


where p(x) = an)2"+---+a,% +a. 
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Proof 


Let p(x) = oj) az’ and q(x) = S77", bia". It is easy to show that da(p(x)+4(x)) = da(p(x)) + ba(a(x)). To 
show that multiplication is preserved under the map ¢q, observe that 


ba(p(z))¢a(q(z)) = p(a)q(a) 


The map ¢, : R[x] — R is called the evaluation homomorphism at a. 


This page titled 17.1: Polynomial Rings is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or 
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17.2: The Division Algorithm 


Recall that the division algorithm for integers (Theorem 2.9) says that if a and b are integers with b > 0, then there exist unique 
integers q andr such that a=bq+r, where 0 <r <b. The algorithm by which g and r are found is just long division. A similar 
theorem exists for polynomials. The division algorithm for polynomials has several important consequences. Since its proof is very 
similar to the corresponding proof for integers, it is worthwhile to review Theorem 2.9 at this point. 


Theorem 17.6. Division Algorithm 


Let f(x) and g(x) be polynomials in Fx], where F is a field and g(x) is a nonzero polynomial. Then there exist unique 
polynomials q(x), r(x) € F'[a|such that 


f(x) =9(z)o(x) +r(z), 


where either deg r(x) < deg g(x) or r(x) is the zero polynomial. 


Proof 
We will first consider the existence of g(x) and r(x). If f(a) is the zero polynomial, then 
0 =0-9(x) +0; 


hence, both g and r must also be the zero polynomial. Now suppose that f(x) is not the zero polynomial and that 
deg f(x) =n and deg g(x) =m. If m >n, then we can let g(x) =0 and r(x) = f(x). Hence, we may assume that 
m <n and proceed by induction on n. If 


f(w) =a,2"+a,_12" 1 +---+a,2 +a 
g(x) = Cee ape ae +--+ +b, 2 +69 


the polynomial 


an 


f'(z) = f(x) - a) 


has degree less than n or is the zero polynomial. By induction, there exist polynomials q’ (x) and r(x) such that 
f'(x) =q'(x)9(z) +r(a), 
where r(z) = 0 or the degree of r(z) is less than the degree of g(x). Now let 


an n—m 


Then 


with r(z) the zero polynomial or deg r(x) < deg g(z). 


To show that g(a) and r(a) are unique, suppose that there exist two other polynomials q;(2) and rj(a#) such that 
f(x) =9(z)qi(z)+ri(x) with deg r(x) < deg g(x) orri(x) =0, so that 


f(z) = g(w)a(x) + r(x) = g(x) n(x) +r1(2), 
and 
9(x)|q(x) —q(#)] =ri(x) —r(@). 
If q(x) —q (x) is not the zero polynomial, then 
deg(9(x)[a(x) — 91 (x)]) = deg(ri(x) —r(w)) > deg g(a). 


However, the degrees of both r(x) and r;(a) are strictly less than the degree of g(x); therefore, r(z)=1i(x) and 
q(x) =a (z). 
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The division algorithm merely formalizes long division of polynomials, a task we have been familiar with since high school. 
Solution 


For example, suppose that we divide z* — 27 +22 —3 by a—2. 


x + x + 4 
A = 2, x = x” + 2x = 3 
x = Qn” 
x + 22 = 3 
x” = 2x 
Ax = 3 
4x — 8 


Hence, «3 — x? + 22 —3 = (x —2)(x?++44+4)+5. 


Let p(x) be a polynomial in Fz] and a € F’. We say that a is a zero or root of p(x) if p(x) is in the kernel of the evaluation 
homomorphism ¢,. All we are really saying here is that a is a zero of p(x) if p(a) =0. 


Corollary 17.8 


Let F be a field. An element a € F is a zero of p(x) € F(x] if and only if zx — a is a factor of p(x) in F [a]. 
Proof 
Suppose that a € F' and p(a) = 0. By the division algorithm, there exist polynomials g(x) and r(x) such that 
p(x) = (x —a)q(x) + r(x) 


and the degree of r(x) must be less than the degree of « — a. Since the degree of r() is less than 1, r(x) =a fora € F; 
therefore, 


p(x) =(«—a)q(z) +a. 
But 
0 =p(a) =0-9q(a) +a=a; 
consequently, p(x) =(a«—a)q(x), anda —a isa factor of p(z). 


Conversely, suppose that x —a isa factor of p(x); say p(x) = (x —a)q(x). Then p(a) =0-q(a) =0. 


Corollary 17.9 


Let F be a field. A nonzero polynomial p(x) of degree n in Fx] can have at most n distinct zeros in F. 
Proof 


We will use induction on the degree of p(x). If deg p(x) =0, then p(x) is a constant polynomial and has no zeros. Let 
deg p(x) =1. Then p(x) =axz+b for some a and 6 in F’. If ay and a are zeros of p(x), then aay +b=aa,+b or 
a1 = a2. 


Now assume that deg p(x) > 1. If p(x) does not have a zero in F’, then we are done. On the other hand, if a is a zero of 
p(«), then p(x) =(«—a)q(x) for some q(x) € F [x] by Corollary 17.8. The degree of g(x) is m—1 by Proposition 
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17.4. Let 8 be some other zero of p(x) that is distinct from a. Then p(8) =(6—a)q(8) =0. Sincea# and F isa 
field, g(6) =0. By our induction hypothesis, g(x) can have at most n —1 zeros in F that are distinct from a. Therefore, 
p(ax) has at most n distinct zeros in F’. 


Let F be a field. A monic polynomial d(x) is a greatest common divisor of polynomials p(x), q(x) € oT lif d(a) evenly divides 
both p(x) and g(a); and, if for any other polynomial d’(x) dividing both p(x) and q(x), d'(x)|d(x). We write 
d(x) = gcd(p(x), q(x)). Two polynomials p(x) and q(x) are relatively prime if gcd(p(x), q(x)) =1. 


Proposition 17.10 


Let F be a field and suppose that d(x) is a greatest common divisor of two polynomials p(x) and q(x) in F' [x]. Then there 
exist polynomials r(a) and s(a) such that 


d(x) =r(x)p(x) +s(x)q(x). 


Furthermore, the greatest common divisor of two polynomials is unique. 


Proof 


Let d(x) be the monic polynomial of smallest degree in the set 


S={f(x)p(x) + 9(x)a(x) : F(z), o() € Flz]}. 
( 


We can write d(z) =r(x)p(x)+s(x)q(x) for two polynomials r(x) and s(a) in Fa]. We need to show that d(x) 
divides both p(a) and q(z). We shall first show that d() divides p(x). By the division algorithm, there exist polynomials 
a(x) and b(«) such that p(x) =a(x)d(x)+b(x), where b(x) is either the zero polynomial or deg b(x) < deg d(x). 


Therefore, 
b(x) = p(x) —a(x)d(z) 
= p(x) —a(x)(r(x)p(z) + s(x)q(z)) 
= p(x) —a(x)r(x)p(x) —a(x)s(x)q(z) 
= p(x)(1 — a(x)r(x)) +¢(x)(—a(x)s(z)) 


is a linear combination of p(x) and q(x) and therefore must be in S. However, b(x) must be the zero polynomial since 
d(x) was chosen to be of smallest degree; consequently, d(x) divides p(a). A symmetric argument shows that d(z) must 
also divide q(x); hence, d(z) is a common divisor of p(x) and q(x). 


To show that d(x) is a greatest common divisor of p(x) and g(x), suppose that d’(x) is another common divisor of p(z) 
and q(x). We will show that d’(x) | d(x). Since d’(x) is a common divisor of p(x) and g(a), there exist polynomials 
u(x) and v(z) such that p(a~) = u(z)d'(x) and q(x) = v(x)d'(x). Therefore, 


d(x) =r(x)p(x) + s(x)a(z) 
=r(x)u(x)d"(x) + s(x)u(x)d'(x) 
=a (w [r(x)u(z) + s(z)o(@)). 


) 
Since d'(x) | d(x), d(x) is a greatest common divisor of p(x) and q(x). 
Finally, we must show that the greatest common divisor of p(x) and g(x) is unique. Suppose that d'(x) is another greatest 
common divisor of p(z) and g(a). We have just shown that there exist polynomials u(x) and v(x) in F[a] such that 


d(x) =d'(x)[r(x)u(x)+s(x)v(x)]. Since 
deg d(x) = deg d' (x) + deg[r(x)u(z) + s(z)v(z)} 


and d(a) and d’(x) are both greatest common divisors, deg d(x) = deg d’(x). Since d(x) and d'(x) are both monic 
polynomials of the same degree, it must be the case that d(x) = d'(z). 


Notice the similarity between the proof of Proposition 17.10 and the proof of Theorem 2.10. 
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17.3: Irreducible Polynomials 


A nonconstant polynomial f(x) € F'[z] is irreducible over a field F if f(x) cannot be expressed as a product of two polynomials 
g(x) and h(a) in F'[z], where the degrees of g(x) and h(a) are both smaller than the degree of f(x). Irreducible polynomials 
function as the “prime numbers” of polynomial rings. 


The polynomial «? — 2 € Q|z] is irreducible since 
Solution 


it cannot be factored any further over the rational numbers. Similarly, z? +1 is irreducible over the real numbers. 


The polynomial p(x) =a? +2? +2 is irreducible over Z3[2]. Suppose that this polynomial was reducible over Z3[z]. By the 
division algorithm there would have to be a factor of the form x — a, where a is some element in Z3[2]. 


Solution 


Hence, it would have to be true that p(a) = 0. However, 


Therefore, p(a) has no zeros in Z3 and must be irreducible. 


Let p(x) € Q[x]. Then 


i 
p(z) = 5 (20 [OIE hoo Toetee 


where Tr, 8, @0,---, Qn are integers, the a;'s are relatively prime, and r and s are relatively prime. 
Proof 
Suppose that 
bo by b 
p(t) =—+—a2+---+—2", 
Co Cy n 


where the b;'s and the c;'s are integers. We can rewrite p(x) as 


1 
p(x) = ———(d) + d\x +---+d,2"), 
Co eee Cn 
where do, ...,d, are integers. Let d be the greatest common divisor of dg, ... , dn. Then 
d n 
pa)l=— 7 | ait +: - + Gne |, 
Co eee Cn 


where d; = da; and the a,'s are relatively prime. Reducing d/ (cp - - - cn) to its lowest terms, we can write 


p(x) = —(ao +aiz +--+ +an2"), 


w®|[R 


where gcd(r, s) = 1. 
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Theorem 17.14. Gauss's Lemma 


Let p(x) € Z[z] be a monic polynomial such that p(x) factors into a product of two polynomials a(x) and B(x) in Q|a}, 
where the degrees of both a(a) and 8(x) are less than the degree of p(x). Then p(x) = a(x)b(x), where a(x) and b(x) are 
monic polynomials in Zz] with deg a(x) = deg a(x) and deg B(x) = deg b(z). 
Proof 
By Lemma 17.13 we can assume that 
C1 


a(z) = ao +a,2+---+amz™) = —ay(zx) 
dy dy 


B(z) = z(% +bhig+---+br2")= Tht) 


where the a,'s are relatively prime and the 6;'s are relatively prime. Consequently, 


C1 C2 c 
p(x) = a(x) B(x) = ——-an (2) 61 (x) = Son (x) h(x), 

did, d 
where c/dis the product of c; /d; and cp /d2 expressed in lowest terms. Hence, dp(x) = cay (x) 61 (2). 
If d=1, then cab, =1 since p(x) is a monic polynomial. Hence, either c=1 or c=—1. If c=1, then either 
Om = bp, =1 or dm =b, =—1. In the first case p(x) = a4 (x)61(x), where aj(x) and 6;(2) are monic polynomials 
with deg a(x) = deg ai (x) and deg 8(x) = deg fi (x). In the second case a(x) = —ay(x) and b(x) =—61(x) are the 
correct monic polynomials since p(z) = (—a1(x))(—6i(x)) =a(x)b(x). The case in which c=~—1 can be handled 
similarly. 


Now suppose that d #1. Since gcd(c, d) = 1, there exists a prime p such that p|d and p\notdividec. Also, since the 
coefficients of a(x) are relatively prime, there exists a coefficient a; such that p\notdividea,. Similarly, there exists a 
coefficient b; of 8;(a) such that p\notdivideb,. Let a(x) and 6} (x) be the polynomials in Z,|x] obtained by reducing 
the coefficients of a(x) and 8;(x) modulo p. Since p| d, a/,(x)8;(x) =0 in Z,[x]. However, this is impossible since 
neither a(x) nor (a) is the zero polynomial and Z,[«] is an integral domain. Therefore, d=1 and the theorem is 
proven. 


Corollary 17.15 


Let p(z) =2" +an_12" 1+-+++a9 bea polynomial with coefficients in Z and ay # 0. If p(x) has a zero in Q, then p(x) 
also has a zero a in Z. Furthermore, a divides ao. 
Proof 


Let p(x) have a zeroa € Q. Then p(x) must have a linear factor z — a. By Gauss's Lemma, p(z) has a factorization with 
a linear factor in Z[a]. Hence, for some a € Z 


-1 


p(x) = (4 —a)(a" ~ +-+-—ag/a). 


Thus ag/a € Z and soa | ao. 


Example 17.16 


Let p(x) =2* — 223 +2+1. We shall show that p(z) is irreducible over Q[z]. 
Solution 


Assume that p(x) is reducible. Then either p(a) has a linear factor, say p(x) = (a —a)q(z), where g(a) is a polynomial of 
degree three, or p(x) has two quadratic factors. 


If p(z) has a linear factor in Q[z], then it has a zero in Z. By Corollary 17.15, any zero must divide 1 and therefore must be 
+1; however, p(1) = 1 and p(—1) =3. Consequently, we have eliminated the possibility that p(x) has any linear factors. 


Therefore, if p(x) is reducible it must factor into two quadratic polynomials, say 
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p(x) = («2 +ax +b)(a? +cx +d) 
=2x*+(a+c)a* +(ac+b+d)x* + (ad+bc)x + bd, 


where each factor is in Z[a] by Gauss's Lemma. Hence, 


a+c=-2 
ac+b+d=0 
ad+be =1 
bd = 1. 


Since bd = 1, eitherb =d=1 orb=d =~ 1. Ineither case b =d andso 
ad+bc=b(a+c) =1. 


Since a+c = —2, we know that —2b = 1. This is impossible since 6 is an integer. Therefore, p(a) must be irreducible over 


Q. 


Theorem 17.17. Eisenstein's Criterion 


Let p be a prime and suppose that 
f(z) =anz" +---+a9 € Z[z]. 
Ifp | a; fori =0,1,...,n—1, but p\notdividea, and p\notdivideag, then f(z) is irreducible over Q. 
Proof 
By Gauss's Lemma, we need only show that f(a) does not factor into polynomials of lower degree in Za]. Let 
f(x) = (6-@" +---+bp)(cex* +--- +p) 


be a factorization in Z[x], with b, and c, not equal to zero and r, s <n. Since p* does not divide ap = boc, either bp or 
co is not divisible by p. Suppose that p\notdivideby and p | co. Since p\notdividea, and an = bcs, neither b, nor c, is 
divisible by p. Let m be the smallest value of k such that p\notdividec,. Then 


am = boem +b1Cm-1 apne +bmeo 


is not divisible by p, since each term on the right-hand side of the equation is divisible by p except for boc. Therefore, 
m =n since a, is divisible by p for m <n. Hence, f(x) cannot be factored into polynomials of lower degree and 
therefore must be irreducible. 


Example 17.18 


The polynomial 

f(x) =162° —924 +32? +62 —21 
is easily seen to be irreducible over 
Solution 


Q by Eisenstein's Criterion if we let p = 3. 


Eisenstein's Criterion is more useful in constructing irreducible polynomials of a certain degree over Q than in determining the 
irreducibility of an arbitrary polynomial in Q[x]: given an arbitrary polynomial, it is not very likely that we can apply Eisenstein's 
Criterion. The real value of Theorem 17.17 is that we now have an easy method of generating irreducible polynomials of any 
degree. 


Ideals in F [a] 
Let F be a field. Recall that a principal ideal in F’[] is an ideal (p(x)) generated by some polynomial p(z); that is, 
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Example 17.19 


(p(z)) = {p(@)a(@) : a(@) € Fla]}. 


The polynomial x? in F'[2] generates the ideal (x?) consisting of 
Solution 


all polynomials with no constant term or term of degree 1. 


Theorem 17.20 


If F is a field, then every ideal in F'|x| is a principal ideal. 


Proof 


Let I be an ideal of F[a]. If I is the zero ideal, the theorem is easily true. Suppose that J is a nontrivial ideal in F'[a], and 
let p(x) € I be a nonzero element of minimal degree. If deg p(z) =0, then p(x) is a nonzero constant and 1 must be in 
I. Since 1 generates all of F'|x], (1) =I = F[a] and J is again a principal ideal. 


Now assume that deg p(x) >1 and let f(z) be any element in J. By the division algorithm there exist g(a) and r(a) in 
F{z| such that f(x)=p(x)q(x)+r(x) and degr(x)<degp(x). Since f(x),p(x) <I and I is an ideal, 
r(x) = f(x) —p(x)q(x) is also in I. However, since we chose p(z) to be of minimal degree, r(a) must be the zero 
polynomial. Since we can write any element f(x) in I as p(x)q(x) for some q(x) € F|a], it must be the case that 


I= (p(2)). 


It is not the case that every ideal in the ring F'[z, y] is a principal ideal. Consider the ideal of F'[z, y] generated by the 
polynomials x and y. 


Solution 


This is the ideal of F'[x, y] consisting of all polynomials with no constant term. Since both z and y are in the ideal, no single 
polynomial can generate the entire ideal. 


Let F be a field and suppose that p(x) € F'[x|. Then the ideal generated by p(x) is maximal if and only if p(«) is irreducible. 


Proof 


Suppose that p(x) generates a maximal ideal of F'[z]. Then (p(z)) is also a prime ideal of F'[x]. Since a maximal ideal 
must be properly contained inside F'[z], p(x) cannot be a constant polynomial. Let us assume that p(x) factors into two 
polynomials of lesser degree, say p(x) = f(x)g(x). Since (p(x)) is a prime ideal one of these factors, say f(x), is in 
(p(z)) and therefore be a multiple of p(x). But this would imply that (p(x)) C (f(z)), which is impossible since (p(a)) 
is maximal. 


Conversely, suppose that p(x) is irreducible over F'[x]. Let I be an ideal in F'|x] containing (p(x)). By Theorem 17.20 I 
is a principal ideal; hence, J = (f(x)) for some f(x) € F[a]. Since p(x) € I, it must be the case that p(x) = f(z)9(z) 
for some g(x) € F[az]. However, p(x) is irreducible; hence, either f(x) or g(x) is a constant polynomial. If f(x) is 
constant, then I = F'[x] and we are done. If g(x) is constant, then f(a) is a constant multiple of J and I = (p(x)). Thus, 
there are no proper ideals of F'|a] that properly contain (p(z)). 


Historical Note 


Throughout history, the solution of polynomial equations has been a challenging problem. The Babylonians knew how to solve the 
equation ax? +bz+c=0. Omar Khayyam (1048-1131) devised methods of solving cubic equations through the use of 
geometric constructions and conic sections. The algebraic solution of the general cubic equation ax? +bx?+cx+d=0 was not 
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discovered until the sixteenth century. An Italian mathematician, Luca Pacioli (ca. 1445-1509), wrote in Summa de Arithmetica 
that the solution of the cubic was impossible. This was taken as a challenge by the rest of the mathematical community. 


Scipione del Ferro (1465-1526), of the University of Bologna, solved the “depressed cubic,” 
az* +ca+d=0. 


He kept his solution an absolute secret. This may seem surprising today, when mathematicians are usually very eager to publish 
their results, but in the days of the Italian Renaissance secrecy was customary. Academic appointments were not easy to secure and 
depended on the ability to prevail in public contests. Such challenges could be issued at any time. Consequently, any major new 
discovery was a valuable weapon in such a contest. If an opponent presented a list of problems to be solved, del Ferro could in turn 
present a list of depressed cubics. He kept the secret of his discovery throughout his life, passing it on only on his deathbed to his 
student Antonio Fior (ca. 1506—?). 


Although Fior was not the equal of his teacher, he immediately issued a challenge to Niccolo Fontana (1499-1557). Fontana was 
known as Tartaglia (the Stammerer). As a youth he had suffered a blow from the sword of a French soldier during an attack on his 
village. He survived the savage wound, but his speech was permanently impaired. Tartaglia sent Fior a list of 30 various 
mathematical problems; Fior countered by sending Tartaglia a list of 30 depressed cubics. Tartaglia would either solve all 30 of the 
problems or absolutely fail. After much effort Tartaglia finally succeeded in solving the depressed cubic and defeated Fior, who 
faded into obscurity. 


At this point another mathematician, Gerolamo Cardano (1501-1576), entered the story. Cardano wrote to Tartaglia, begging him 
for the solution to the depressed cubic. Tartaglia refused several of his requests, then finally revealed the solution to Cardano after 
the latter swore an oath not to publish the secret or to pass it on to anyone else. Using the knowledge that he had obtained from 
Tartaglia, Cardano eventually solved the general cubic 


ax + bx? +cx+d=0. 
Cardano shared the secret with his student, Ludovico Ferrari (1522-1565), who solved the general quartic equation, 
az‘ + bz? +cx?+dz+e=0. 


In 1543, Cardano and Ferrari examined del Ferro's papers and discovered that he had also solved the depressed cubic. Cardano felt 
that this relieved him of his obligation to Tartaglia, so he proceeded to publish the solutions in Ars Magna (1545), in which he gave 
credit to del Ferro for solving the special case of the cubic. This resulted in a bitter dispute between Cardano and Tartaglia, who 
published the story of the oath a year later. 
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17.4: Reading Questions 


Suppose p() is a polynomial of degree n with coefficients from any field. How many roots can p(x) have? How does this 
generalize your high school algebra experience? 


This page titled 17.4: Reading Questions is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or 
curated by Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the 
LibreTexts platform; a detailed edit history is available upon request. 
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17.5: Exercises 


List all of the polynomials of degree 3 or less in Z [x]. 


Compute each of the following. 


1. (5a? +32 —4)+ (427-2 +9) in Zy9[2] 
2. (52? + 32 —4)(42? —2 +9) in Zy2[2] 

3. (723 +32” —x)+(62?-82+4) in Zo[z] 
4, (3a? + 2a —4) + (4a? +2) in Zs [zx] 

5. (3a? + 22 —4)(4x? 42) in Z5[2] 

6. (5a? +32 — 2) in Z|] 


Use the division algorithm to find g(x) and r(x) such that a(x) = q(x)b(x) + r(x) with deg r(x) < deg b(z) for each of the 
following pairs of polynomials. 
1. a(x) =52? +62" —32+4 andb(r)=2—2 in Z,[z] 
(e) =6a* —223+27-324+1 andb(x)=22+2-2 inZ,[z] 
3.a(z) =42° —2? +2?+4 andb(r)=2> —2 in Zs5[z] 
(2) =2°+23—2?—2 andb(z)=2?+2 in Zz] 


Find the greatest common divisor of each of the following pairs p(x) and q(x) of polynomials. If d(x) = gcd(p(z), q(x)), 
find two polynomials a(z) and b(z) such that a(x)p(x) + 6(x)gq(x) = d(z). 


1. p(x) = 2? —6x? +142 —15 and g(x) = 2? —827 +212 —18, where p(x), q(x) € Q|2] 
(e)=a23 +2? -2+1 andq(z)=2*+2-1, where p(x), q(x) € Z,[z] 

3. p(z) =23 427-444 andg(z)=2°+3x—2, where p(z), q(x) € Zs[z] 
(«) =23 —22+4 and q(x) =42> +2+3, where p(x), q(x) € Q[z] 


Find all of the zeros for each of the following polynomials. 


1.523 +42? -—2+4+9 in Z,)[z] 
2.343 —42? -2 +4 inZs[z] 
3. 5a* + 2x7 —3 in Zy[z] 
4.2°+2+1 in Z[z] 


Find all of the units in Z[z]. 


Find a unit p(x) in Z4[2] such that deg p(x) > 1. 
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Which of the following polynomials are irreducible over Q[]? 


1. a+ —293 422? +2+44 
2.04 5a? +32 —2 

3. 32° —4a3 —627+6 

4. 5a° —6a* —32? + 9x —15 


=a 


Find all of the irreducible polynomials of degrees 2 and 3 in Z2[z]. 


Give two different factorizations of z7-+2+8 in Zjo[z]. 


Prove or disprove: There exists a polynomial p(x) in Z¢[x] of degree n with more than n distinct zeros. 


If F is a field, show that F[a,...,2,] is an integral domain. 


Show that the division algorithm does not hold for Z[a]. Why does it fail? 


Prove or disprove: x? + a is irreducible for any a € Z,, where p is prime. 


Let f(a) be irreducible in F'[x], where F is a field. If f(x) | p(x)q(x), prove that either f(x) | p(x) or f(x) | g(a). 


Suppose that R and S are isomorphic rings. Prove that R[x] = S{[z]. 


Let F be a field anda € F. If p(x) € F'[x], show that p(a) is the remainder obtained when p(x) is divided by z —a. 


=H 8:8 BB cB BB 


The Rational Root Theorem 
Let 
p(£) = Anz" +an_12" 1+---+a9 € Z[z], 


where a, #0. Prove that if p(r/s) =0, where gcd(r, s) =1, thenr | ap and s | an. 
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Let Q* be the multiplicative group of positive rational numbers. Prove that Q* is isomorphic to (Z[a], +). 


Cyclotomic Polynomials 


The polynomial 


eel 
®,(«) = = i =a tha"? 4..-+2¢41 
= 


is called the cyclotomic polynomial. Show that ®, () is irreducible over Q for any prime p. 


If F is a field, show that there are infinitely many irreducible polynomials in F'[z]. 


Let R be a commutative ring with identity. Prove that multiplication is commutative in R[a]. 


Let R be a commutative ring with identity. Prove that multiplication is distributive in R[z]. 


Show that x? — x has p distinct zeros in Z,, for any prime p. Conclude that 


xz? —g = a(x —1)(x—2)--- (a —(p—1)). 


Let F be a field and f(x) =aj +a ,z+---+a,2" be in F[z]. Define f’(r) =a, +2a,x+---+na,z" 1 to be the 
derivative of f(x). 


1. Prove that 
(f +9)'(x) = f'(e) +9'(2). 
Conclude that we can define a homomorphism of abelian groups D: F' [a] + F[z] by D(f(x)) = f'(z). 


2. Calculate the kernel of D if \chrF =0. 
3. Calculate the kernel of D if \chrF =p. 
4. Prove that 


(f9) (x) = f'(x) g(x) + f(x) 9" (2). 
5. Suppose that we can factor a polynomial f(z) € F'[z] into linear factors, say 


f(z) = a(x —a1)(# — a) +» (@ —an). 


Prove that f(x) has no repeated factors if and only if f(x) and f’(z) are relatively prime. 
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Let F' be a field. Show that F’[z] is never a field. 
Let R be an integral domain. Prove that R[z1,..., %,] is an integral domain. 
Let R be a commutative ring with identity. Show that R[x] has a subring R’ isomorphic to R. 


Let p(x) and q(x) be polynomials in R[x], where R is a commutative ring with identity. Prove that 
deg(p(x) + q(x)) <max(deg p(z), deg q(x). 
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17.6: Additional Exercises- Solving the Cubic and Quartic Equations 


Solve the general quadratic equation 


ax* +bz+c=0 


to obtain 
fom —btv b2 —4Aac 
ae) 


The discriminant of the quadratic equation A = b” —4ac determines the nature of the solutions of the equation. If A > 0, the 
equation has two distinct real solutions. If A = 0, the equation has a single repeated real root. If A < 0, there are two distinct 
imaginary solutions. 


Show that any cubic equation of the form 
x + bx? +cx+d=0 


can be reduced to the form y? + py+q=0 by making the substitution 2 = y —b/3. 


Prove that the cube roots of 1 are given by 


_ -1+iv3 
7 2 
een! —iV/3 
2 
w =1 
Make the substitution 
yo2-2 
3z 


for y in the equation y? + py+q=0 and obtain two solutions A and B for z3. 
Show that the product of the solutions obtained in (4) is —p* /27, deducing that AB = —p/3. 


Prove that the possible solutions for z in (4) are given by 
VA, w/A, wV/A, VB, wR, oO YB 


and use this result to show that the three possible solutions for y are 


taf @ pe Oe 2 of 9 pe Ga 
“ Sn oe a 2 a7 a? 
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| where 2 = 0, 1, 2. 


The discriminant of the cubic equation is 


Show that y? + py +q=0 


1. has three real roots, at least two of which are equal, if A = 0. 
2. has one real root and two conjugate imaginary roots if A > 0. 
3. has three distinct real roots if A < 0. 


Solve the following cubic equations. 


1. 2° —4e? +112 +30 =0 
2.23 —32+5=0 

3. 2° —32+2=0 

4.23 +2+3=0 


Show that the general quartic equation 
x‘ +ax* +ba? +cx+d=0 
can be reduced to 
y tpy’ +qy+r=0 
by using the substitution z = y—a/4. 


Show that 


2 1 i 2 1 2 
FT er a es ceo) alae | a) 


Show that the right-hand side of Exercise 17.6.10can be put in the form (my +k)? if and only if 
2 1 , 
q’ —4(z—p) ao =0. 


From Exercise 17.6.1 1obtain the resolvent cubic equation 
23 —pz* —4rz+(4pr—q*) =0. 


Solving the resolvent cubic equation, put the equation found in Exercise 17.6.10 in the form 
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to obtain the solution of the quartic equation. 


Use this method to solve the following quartic equations. 
1.2'—2? —32+4+2=0 
ete Te" — 6 — 0 
3.24 227 +42 -3=0 
4g —4e° 1327 52 +2 =0 
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17.7: Sage 


Sage is particularly adept at building, analyzing and manipulating polynomial rings. We have seen some of this in the previous 
chapter. Let's begin by creating three polynomial rings and checking some of their basic properties. There are several ways to 
construct polynomial rings, but the syntax used here is the most straightforward. 


Polynomial Rings and their Elements 
Basic properties of rings are availble for these examples. 


With the construction syntax used above, the variables can be used to create elements of the polynomial ring without explicit 
coercion (though we need to be careful about constant polynomials). 


Polynomials can be evaluated like they are functions, so we can mimic the evaluation homomorphism. 


Notice that is a degree two polynomial, yet through a brute-force examination we see that the polynomial only has one root, 
contrary to our usual expectations. It can be even more unusual. 


Sage can create and manipulate rings of polynomials in more than one variable, though we will not have much occasion to use this 
functionality in this course. 


Irreducible Polynomials 
Whether or not a polynomial factors, taking into consideration the ring used for its coefficients, is an important topic in this chapter 
and many of the following chapters. Sage can factor, and determine irreducibility, over the integers, the rationals, and finite fields. 


First, over the rationals. 


Factoring over the integers is really no different than factoring over the rationals. This is the content of Theorem 17.14— finding a 
factorization over the integers can be converted to finding a factorization over the rationals. So it is with Sage, there is little 
difference between working over the rationals and the integers. It is a little different working over a finite field. Commentary 
follows. 


To check these factorizations, we need to compute in the finite field, F , and so we need to know how the symbol a_ behaves. 
This symbol is considered as a root of a degree two polynomial over the integers mod 5, which we can get with the 
.modulus() method. 


Soa? +4a+2=0, ora? =—4a—3 =a+2. So when checking the factorizations, anytime you see an a” you can replace it by 
a-+2. Notice that by Corollary 17.8 we could find the one linear factor of r , and the four linear factors of s_ , through a brute- 
force search for roots. This is feasible because the field is finite. 


However, q factors into a pair of degree 2 polynomials, so no amount of testing for roots will discover a factor. 
With Eisenstein's Criterion, we can create irreducible polynomials, such as in Example 17.18. 


Over the field Z,, the field of integers mod a prime p, Conway polynomials are canonical choices of a polynomial of degree n that 
is irreducible over Z,. See the exercises for more about these polynomials. 


Polynomials over Fields 


If F is a field, then every ideal of F'[z] is principal (Theorem 17.20). Nothing stops you from giving Sage two (or more) generators 
to construct an ideal, but Sage will determine the element to use in a description of the ideal as a principal ideal. 


Theorem 17.22 is the key fact that allows us to easily construct finite fields. Here is a construction of a finite field of order 
7° = 16 807. All we need is a polynomial of degree 5 that is irreducible over Z7. 


The symbol xbar isa generator of the field, but right now it is not accessible. xbar is the coset 2+(xz°+a+4). A better 


construction would include specifying this generator. 
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17.8: Sage Exercises 


Consider the polynomial 2? — 32 +4. Compute the most thorough factorization of this polynomial over each of the following 

fields: (a) the finite field Z;, (b) a finite field with 125 elements, (c) the rationals, (d) the real numbers and (e) the complex 

numbers. To do this, build the appropriate polynomial ring, and construct the polynomial as a member of this ring, and use the 
.factor() method. 


“Conway polynomials” are irreducible polynomials over Z, that Sage (and other software) uses to build maximal ideals in 
polynomial rings, and thus quotient rings that are fields. Roughly speaking, they are “canonical” choices for each degree and 
each prime. The command conway _polynomial(p, n) will return a database entry that is an irreducible polynomial 
of degree n over Zp. 


Execute the command conway _polynomial(5, 4) to obtain an allegedly irreducible polynomial of degree 4 over Zs: 
p=a'+4a*+4+42+2. Construct the right polynomial ring (i.e., in the indeterminate x) and verify that pis really an 
element of your polynomial ring. 


First determine that p has no linear factors. The only possibility left is that factors as two quadratic polynomials over Zs. 
Use a list comprehension with three for statements to create every possible quadratic polynomial over Z;. Now use this list 
to create every possible product of two quadratic polynomials and check to seeif is in this list. 


More on Conway polynomials is available at Frank Liibeck's site. 


Construct a finite field of order 729 as a quotient of a polynomial ring by a principal ideal generated with a Conway 
polynomial. 


Define the polynomials p= 2? +22?+22+4 and q=a*+2z2? as polynomials with coefficients from the integers. 
Compute gcd(p, g) and verify that the result divides both p and 4q (just form a fraction in Sage and see that it 
simplifies cleanly, or use the .quo_rem() method). 


Proposition 17.10 says there are polynomials r(x) and s(x) such that the greatest common divisor equals 
r(x)p(x) + s(x)q(zx), if the coefficients come from a field. Since here we have two polynomials over the integers, investigate 
the results returned by Sage for the extended gcd, xgcd(p, q) . In particular, show that the first result of the returned 
triple is a multiple of the gcd. Then verify the “linear combination” property of the result. 


For a polynomial ring over a field, every ideal is principal. Begin with the ring of polynomials over the rationals. Experiment 
with constructing ideals using two generators and then see that Sage converts the ideal to a principal ideal with a single 
generator. (You can get this generator with the ideal method .gen() .) Can you explain how this single generator is 
computed? 
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CHAPTER OVERVIEW 


18: Integral Domains 


One of the most important rings we study is the ring of integers. It was our first example of an algebraic structure: the first 
polynomial ring that we examined was Z[z]. We also know that the integers sit naturally inside the field of rational numbers, Q. 
The ring of integers is the model for all integral domains. In this chapter we will examine integral domains in general, answering 
questions about the ideal structure of integral domains, polynomial rings over integral domains, and whether or not an integral 
domain can be embedded in a field. 

18.1: Fields of Fractions 

18.2: Factorization in Integral Domains 

18.3: Reading Questions 

18.4: Exercises 

18.5: References and Suggested Readings 

18.6: Sage 

18.7: Sage Exercises 
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18.1: Fields of Fractions 


Every field is also an integral domain; however, there are many integral domains that are not fields. For example, the integers Z 
form an integral domain but not a field. A question that naturally arises is how we might associate an integral domain with a field. 
There is a natural way to construct the rationals Q from the integers: the rationals can be represented as formal quotients of two 
integers. The rational numbers are certainly a field. In fact, it can be shown that the rationals are the smallest field that contains the 
integers. Given an integral domain D, our question now becomes how to construct a smallest field F' containing D. We will do this 
in the same way as we constructed the rationals from the integers. 


An element p/g € Q is the quotient of two integers p and gq; however, different pairs of integers can represent the same rational 
number. For instance, 1/2 = 2/4 = 3/6. We know that 

Ca 
b od 
if and only if ad = bc. A more formal way of considering this problem is to examine fractions in terms of equivalence relations. 
We can think of elements in Q as ordered pairs in Z x Z. A quotient p/q can be written as (p,q). For instance, (3,7) would 
represent the fraction 3/7. However, there are problems if we consider all possible pairs in Z x Z. There is no fraction 5/0 
corresponding to the pair (5, 0). Also, the pairs (3, 6) and (2, 4) both represent the fraction 1/2. The first problem is easily solved 
if we require the second coordinate to be nonzero. The second problem is solved by considering two pairs (a, b) and (c, d) to be 
equivalent if ad = bc. 


If we use the approach of ordered pairs instead of fractions, then we can study integral domains in general. Let D be any integral 
domain and let 


S={(a,b):a,b€ Dandb #0}. 
Define a relation on S by (a,b) ~ (c,d) if ad = be. 


Lemma 18.1 


The relation ~ between elements of S is an equivalence relation. 


Proof 


Since D is commutative, ab = ba; hence, ~ is reflexive on D. Now suppose that (a,b) ~ (c,d). Then ad=bc or 
cb =da. Therefore, (c,d) ~ (a,b) and the relation is symmetric. Finally, to show that the relation is transitive, let 
(a,b) ~ (c,d) and (c,d) ~ (e, f). In this case ad = bc and cf = de. Multiplying both sides of ad = bc by f yields 


afd =adf = bcf = bde = bed. 


Since D is an integral domain, we can deduce that af = be or (a, b) ~ (e, f). 


We will denote the set of equivalence classes on S' by Fp. We now need to define the operations of addition and multiplication on 
Fp. Recall how fractions are added and multiplied in Q: 


a ¢ ad + be - 
b d bd ’ 
Ge = Ge 
b dd bd’ 


It seems reasonable to define the operations of addition and multiplication on F’p in a similar manner. If we denote the equivalence 
class of (a, b) € S' by [a, 6], then we are led to define the operations of addition and multiplication on Fp by 


(a, b] +[c, d] = [ad + bc, bd] 


and 


[a, b] - [c, d] = [ac, bd], 
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respectively. The next lemma demonstrates that these operations are independent of the choice of representatives from each 
equivalence class. 


Lemma 18.2 


The operations of addition and multiplication on F'p are well-defined. 


Proof 
We will prove that the operation of addition is well-defined. The proof that multiplication is well-defined is left as an 
exercise. Let [a1, 61] = [@2, bg] and [c1, di] = [c2, da]. We must show that 
[ayd; +61¢1, bi di] = [agd2 +b2c2, bod] 

or, equivalently, that 

(aid; + b1c1)(b2d2) = (b1d1)(a2d2 + b2c2). 
Since [a1, bi] = [a2, bg] and [c1, di] = [c2, dz], we know that a1b2 = bag and cydz = dic. Therefore, 

(aid; +b1c1)(bgd2) =aid1b2d2 + bic, b2d2 

= abd dz + bj b2c1d2 


= bj a2d, dp +b, bod, C2 
= (bi d1) (ado +byc2). 


Lemma 18.3 


The set of equivalence classes of S, Fp, under the equivalence relation ~ , together with the operations of addition and 
multiplication defined by 


+|ce,d] = [ad + be, bd] 
]- [c,d] = [ac, bd], 


£ 
epee 


is a field. 


Proof 


The additive and multiplicative identities are [0,1] and [1,1], respectively. To show that [0,1] is the additive identity, 
observe that 


[a,b] + [0,1] = [al +60, 61] = [a, 8). 


It is easy to show that [1, 1] is the multiplicative identity. Let [a,b] € Fp such that a £0. Then [b, a] is also in Fp and 
[a, b] -[b, a] = [1, 1];hence, [6, a] is the multiplicative inverse for [a, b]. Similarly, [—a, 6] is the additive inverse of [a, b]. 
We leave as exercises the verification of the associative and commutative properties of multiplication in Fp. We also leave 
it to the reader to show that F’p is an abelian group under addition. 


It remains to show that the distributive property holds in Fp; however, 


[a, b][e, f] +[c, d][e, f] =[ae, bf] + [ce, df] 
=|aedf +bfce, bdf?| 
= [aed + bce, bdf| 
= [ade + bce, bdf] 
= ([a, b] +[c, d])[e, f] 


and the lemma is proved. 


The field Fp in Lemma 18.3 is called the field of fractions or field of quotients of the integral domain D. 
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Theorem 18.4 


Let D be an integral domain. Then D can be embedded in a field of fractions F'p, where any element in Fp can be expressed 
as the quotient of two elements in D. Furthermore, the field of fractions Fp is unique in the sense that if EF is any field 
containing D, then there exists a map wy: F'p — E giving an isomorphism with a subfield of E such that (a) =a for all 
elements a € D, where we identify a with its image in Fp. 
Proof 
We will first demonstrate that D can be embedded in the field Fp. Define a map ¢: D > Fp by $(a) =[a, 1]. Then for 
a and bin D, 
o(a+b) = [a+6, 1] = [a, 1] + [b, 1] = o(a) + 6(6) 
and 
$(ab) = [ab, 1] = [a, 1][6, 1] = (a) g(6); 
hence, @ is a homomorphism. To show that @ is one-to-one, suppose that ¢(a)=¢(b). Then [a,1]=[b,1], or 
a=al=1b=b. Finally, any element of F’p can be expressed as the quotient of two elements in D, since 
(a) [p(b)]* = [a, 1][b, ils = [a, 1] -[1, 8] = [a, d]. 
Now let E be a field containing D and define a map w : Fp > E by ¥([a, b]) = ab-. To show that ~ is well-defined, let 
[a1, b;] = [a2, bg]. Then a,b = baz. Therefore, ab,’ =ayb,* and o([a1, b1]) = Y([a2, ba)). 
If [a, b] and [c, d] are in Fp, then 
w([a, b] +[c, d]) = ([ad + bc, bd]) 
= (ad +bc)(bd)* 
=ab'+cd* 
= #([a, 6]) + ¥([e, d]) 
and 
(la, 6] - [e, d]) = #([ac, bal) 
= (ac) (bd) 
= abe can 
Therefore, ~ is a homomorphism. 


To complete the proof of the theorem, we need to show that w is one-to-one. Suppose that ([a, b]) =ab-!=0. Then 
a =0b=0 and [a, b] = (0, b]. Therefore, the kernel of ~ is the zero element [0, b] in F’p, and w is injective. 


Example 18.5 


Since Q is a field, Q[a] is an integral domain. The field of fractions of Q[z] is 
Solution 
the set of all rational expressions p(x) /q(a),where p(x) and q(x) are polynomials over the rationals and q(z) is not the zero 


polynomial. We will denote this field by Q(z). 


We will leave the proofs of the following corollaries of Theorem 18.4 as exercises. 


Corollary 18.6 


Let F be a field of characteristic zero. Then F contains a subfield isomorphic to \({\mathbb Q}\text{.}\ 
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Corollary 18.7 


Let F be a field of characteristic p. Then F contains a subfield isomorphic to Zy. 
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18.2: Factorization in Integral Domains 


The building blocks of the integers are the prime numbers. If F is a field, then irreducible polynomials in F'[z] play a role that is 
very similar to that of the prime numbers in the ring of integers. Given an arbitrary integral domain, we are led to the following 
series of definitions. 

Let R be a commutative ring with identity, and let a and b be elements in R. We say that a divides b, and write a | b, if there exists 
an element c € # such that b =ac. A unit in R is an element that has a multiplicative inverse. Two elements a and 6 in R are said 
to be associates if there exists a unit u in R such that a = ub. 


Let D be an integral domain. A nonzero element p € D that is not a unit is said to be irreducible provided that whenever p = ab, 
either a or b is a unit. Furthermore, p is prime if whenever p | ab either p | a or p | b. 


Example 18.8 


It is important to notice that prime and irreducible elements do not always coincide. Let R be the subring (with identity) of 
Q|z, y] generated by x”, y”, and zy. 


Solution 


Each of these elements is irreducible in R; however, xy is not prime, since zy divides x?y? but does not divide either x? or 
2 


y’. 
The Fundamental Theorem of Arithmetic states that every positive integer n > 1 can be factored into a product of prime numbers 
p1°** Px, where the p,'s are not necessarily distinct. We also know that such factorizations are unique up to the order of the p;,'s. 
We can easily extend this result to the integers. The question arises of whether or not such factorizations are possible in other rings. 
Generalizing this definition, we say an integral domain D is a unique factorization domain, or UFD, if D satisfies the following 
criteria. 


1. Let a € D such that a £0 and a is not a unit. Then a can be written as the product of irreducible elements in D. 
2. Let a = py +++ Pp =41+**Gs, where the p;'s and the q;'s are irreducible. Then r = s and there is a 7 € S, such that p; and qj) 
are associates for 7 =1,...,r. 


Example 18.9 


The integers are a unique factorization domain by the Fundamental Theorem of Arithmetic. 


Example 18.10 


Not every integral domain is a unique factorization domain. The subring Z[./3 7] = {a + by/37} of the complex numbers is an 
integral domain (Exercise 16.7.12 Chapter 16). Let z=a+b,/3i and define v:Z[./3i] +>NU{0} by 
v(z) =|z/? =a? +307. 

Solution 


It is clear that v(z) >0O with equality when z=0. Also, from our knowledge of complex numbers we know that 
v(zw) = v(z)v(w). It is easy to show that if v(z) =1, then z is a unit, and that the only units of Z[,/3 i] are 1 and —1. 


We claim that 4 has two distinct factorizations into irreducible elements: 


4=2.2=(1-./31)(1+ 32). 


We must show that each of these factors is an irreducible element in Z[,/3 i]. If 2 is not irreducible, then 2 = zw for elements 
z, w in Z|,/3 i] where v(z) = v(w) = 2. However, there does not exist an element in z in Z[4/3 7] such that v(z) = 2 because 
the equation a? + 3b? = 2 has no integer solutions. Therefore, 2 must be irreducible. A similar argument shows that both 
1—./3i and1+4/3% are irreducible. Since 2 is not a unit multiple of either 1 — \/3i or 14+ ./31, 4 has at least two distinct 
factorizations into irreducible elements. 
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Principal Ideal Domains 


Let R be a commutative ring with identity. Recall that a principal ideal generated by a€ R is an ideal of the form 
(a) = {ra:r © R}. An integral domain in which every ideal is principal is called a principal ideal domain, or PID. 


Lemma 18.11 


Let D be an integral domain and let a, b € D. Then 
1. a | b if and only if (b) C (a). 
2. a and b are associates if and only if (b) = (a). 
3. a is a unit in D if and only if (a) = D. 


Proof 
(1) Suppose that a| b. Then b=az for some x € D. Hence, for every r in D, br =(ax)r=a(ar) and (b) C (a). 
Conversely, suppose that (b) C (a). Then b € (a). Consequently, b = ax for some x € D. Thus, a| b. 


(2) Since a and 6 are associates, there exists a unit w such that a=ub. Therefore, b| a and (a) C (b). Similarly, 
(b) C (a). It follows that (a) = (b). Conversely, suppose that (a) = (b). By part (1), a| 6 and b| a. Then a=bz and 
b=ay for some z, y € D. Therefore, a = bx = ayz. Since D is an integral domain, zy = 1; that is, x and y are units 
and a and b are associates. 


(3) An element a € D is a unit if and only if @ is an associate of 1. However, a is an associate of 1 if and only if 
(a) = (1) =D. 


Theorem 18.12 


Let D be a PID and (p) be a nonzero ideal in D. Then (p) is a maximal ideal if and only if p is irreducible. 


Proof 


Suppose that (p) is a maximal ideal. If some element a in D divides p, then (p) C (a). Since (p) is maximal, either 
D = (a) or (p) = (a). Consequently, either a and p are associates or a is a unit. Therefore, p is irreducible. 


Conversely, let p be irreducible. If (a) is an ideal in D such that (p) C (a) CD, thena| p. Since p is irreducible, either 
a must be a unit or a and p are associates. Therefore, either D = (a) or (p) = (a). Thus, (p) is a maximal ideal. 


Corollary 18.13 


Let D be a PID. If p is irreducible, then p is prime. 


Proof 


Let p be irreducible and suppose that p | ab. Then (ab) C (p). By Corollary 16.4Q since (p) is a maximal ideal, (p) must 
also be a prime ideal. Thus, either a € (p) or b € (p). Hence, either p | a or p| b. 


Lemma 18.14 


Let D be a PID. Let I,, I9,... be a set of ideals such that I, C Iz C---. Then there exists an integer N such that I, = In 
foralln>N. 


Proof 


We claim that [ = Wes I, is an ideal of D. Certainly J is not empty, since CI and0O € J. Ifa,b€ J, thena € J; and 
b € I; for some 7 and 7 in N. Without loss of generality we can assume that 7 < 7. Hence, a and 6 are both in J; and so 
a—b is also in J;. Now letr € D anda I. Again, we note that a € J; for some positive integer 7. Since J; is an ideal, 
ra € I; and hence must be in J. Therefore, we have shown that J is an ideal in D. 
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Since D is a principal ideal domain, there exists an element a € D that generates J. Since a is in Iy for some N €N, we 
know that Iy =I = (a). Consequently, [, =In forn > N. 


Any commutative ring satisfying the condition in Lemma 18.14 is said to satisfy the ascending chain condition, or ACC. Such 
rings are called Noetherian rings, after Emmy Noether. 


Theorem 18.15 


Every PID is a UFD. 


Proof 


Existence of a factorization. Let D be a PID and a be a nonzero element in D that is not a unit. If @ is irreducible, then we 
are done. If not, then there exists a factorization a =a ,b;, where neither a; nor 6; is a unit. Hence, (a) C (a1). By 
Lemma 18.11, we know that (a) # (a1); otherwise, a and a, would be associates and 6; would be a unit, which would 
contradict our assumption. Now suppose that ay =a2bj, where neither az nor bo is a unit. By the same argument as 
before, (a1) C (a2). We can continue with this construction to obtain an ascending chain of ideals 


(a) C (ax) C (ag) C--> 


By Lemma 18.14 there exists a positive integer N such that (a,) = (ay) for all n > N. Consequently, ay must be 
irreducible. We have now shown that a is the product of two elements, one of which must be irreducible. 


Now suppose that a = c)p;, where py is irreducible. If c; is not a unit, we can repeat the preceding argument to conclude 
that (a) C (c1). Either c; is irreducible or c; =cgp2, where p2 is irreducible and cz is not a unit. Continuing in this 
manner, we obtain another chain of ideals 


(a) C (e1) C (eg) C->>. 
This chain must satisfy the ascending chain condition; therefore, 
@ — P1p2°** Pr 
for irreducible elements p1,..., pr. 
Uniqueness of the factorization. To show uniqueness, let 
@ = Pip2°** Pr = 4192 °°* Ws, 


where each p; and each q; is irreducible. Without loss of generality, we can assume that r<s. Since p; divides 
q192°--qQs, by Corollary 18.13 it must divide some qg;. By rearranging the q;'s, we can assume that p; | qi; hence, 
qi =u1p1 for some unit u; in D. Therefore, 


Qa>=Pip2°** Pr =U1Pig2°°° Ws 


or 
P2°°* Pr =U192°°° Qs. 
Continuing in this manner, we can arrange the q;'s such that pp = q2, p3 = q3,.--, Pr =r, to obtain 
U1 U2 °° Up Gry °° ds = 1. 
In this case g,11-°-:qs is a unit, which contradicts the fact that g,11,...,q, are irreducibles. Therefore, r= s and the 


factorization of a is unique. 


Corollary 18.16 


Let F be a field. Then Fx] is a UFD 
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Example 18.17 


Every PID is a UFD, but it is not the case that every UFD is a PID. In Corollary 18.31, we will prove that Z[z] is a UFD. 
However, Z[2] is not a PID. Let I= {5f(x)+29(x): f(x), 9(a) € Z[x]}. We can easily show that I is an ideal of Z[z]. 
Suppose that I = (p(z)). 


Solution 


Since 5 € I, 5=f(x)p(x). In this case p(x) =p must be a constant. Since « € I, x =pg(x); consequently, p = +1. 
However, it follows from this fact that (p(z)) =Z[z]. But this would mean that 3 is in I. Therefore, we can write 
3 =5f(x)+<x9(x) for some f(z) and g(x) in Z[x]. Examining the constant term of this polynomial, we see that 3 =5 f(z), 
which is impossible. 


Euclidean Domains 


We have repeatedly used the division algorithm when proving results about either Z or F[a], where F is a field. We should now 
ask when a division algorithm is available for an integral domain. 


Let D be an integral domain such that there is a function v : D\ {0} > N satisfying the following conditions. 
1. If a and b are nonzero elements in D, then v(a) < v(ab). 
2. Let a,b € D and suppose that b £0. Then there exist elements g,r € D such thata =bq+r and either r = 0 orv(r) < V(b). 


Then D is called a Euclidean domain and v is called a Euclidean valuation. 


Example 18.18 


Absolute value on Z is a Euclidean valuation. 


Example 18.19 


Let F' be a field. Then 
Solution 


the degree of a polynomial in F'[z] is a Euclidean valuation. 


Example 18.20 


Recall that the Gaussian integers in Example 16.12 of Chapter 16 are defined by 

Zi] ={a+bi:a,be€ Z}. 
We usually measure the size of a complex number a+ bi by its absolute value, |a + bi] = Va? +2; however, Va? +b? may 
not be an integer. For our valuation we will let v(a + bi) =a? +b? to ensure that we have an integer. 


We claim that v(a+bi)=a?+b? is a Euclidean valuation on Zi]. Let z,w€Z[i). Then 
v(zw) = |zw|? = |z|?|w|? =v(z)v(w). Since v(z) >1 for every nonzero z € Z[i], v(z) < v(z)v(w). 


Solution 


Next, we must show that for any z=a+bi and w=c-+di in Z[i] with w 40, there exist elements g and r in Z[¢] such that 
z=quw-+r with either r =0 or v(r) < v(w). We can view z and w as elements in Q(t) = {p+ qi: p,q € Q}, the field of 
fractions of Z[i]. Observe that 
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c—di 
@+d? 
ac+bd  bc—ad., 
Se a 
+d? +d? 


( pee I ae ( ee 
= m m u 
1 2 4+@ e+e 


= (mi +moi)+ eee aee ee 
ce+d2 +d? 


= (m, +mMot) + (s+ ti) 


zw) =(a+bi) 


in Q(z). In the last steps we are writing the real and imaginary parts as an integer plus a proper fraction. That is, we take the 
closest integer m, such that the fractional part satisfies |n;/(a? +b?)| < 1/2. For example, we write 


9 1 
Salas 
8 3 
15 1 
= =2--. 
8 8 


Thus, s and ¢ are the “fractional parts” of zw! = (m; + mpi) +(s+ti). We also know that s? +t? <1/4+1/4=1/2. 
Multiplying by w, we have 


z= zw -w=w(m, +m) +w(s+ti) =qu+r, 
where g=m1+mgi andr=w(s+ti). Since z and qw are in Z/i], r must be in Z[i]. Finally, we need to show that either 


r=0 orv(r) < v(w). However, 


OG eee emt Suu) ee) 


Theorem 18.21 


Every Euclidean domain is a principal ideal domain. 


Proof 


Let D be a Euclidean domain and let v be a Euclidean valuation on D. Suppose I is a nontrivial ideal in D and choose a 
nonzero element b € I such that (6) is minimal for all a € I. Since D is a Euclidean domain, there exist elements g and r 
in D such that a= bq+r and either r =0 orv(r) < v(b). Butr =a—bg isin I since J is an ideal; therefore, r = 0 by 
the minimality of b. It follows that a = bq and I = (b). 


Corollary 18.22 


Every Euclidean domain is a unique factorization domain 


Factorization in D[a] 


One of the most important polynomial rings is Z[a]. One of the first questions that come to mind about Z[2] is whether or not it is a 


UFD. We will prove a more general statement here. Our first task is to obtain a more general version of Gauss's Lemma (Theorem 
17.14). 


Let D be a unique factorization domain and suppose that 


p(x) = nz" +++» +a1% +a9 


in D[z]. Then the content of p(x) is the greatest common divisor of ag,...,@,. We say that p(x) is primitive if 
gced(ap,...,@,) =1. 


GNU Free Documentation License 18.2.5 https ://math.libretexts.org/@go/page/81181 


Oibretexts: 


Example 18.23 


In Z{x] the polynomial p(x) = 524 —3x2°+2—4 is a primitive polynomial since the greatest common divisor of the 
coefficients is 1; however, 


Solution 


the polynomial q(x) = 4x? — 6x +8 is not primitive since the content of g(z) is 2. 


Theorem 18.24. Gauss's Lemma 


Let D be a UFD and let f(x) and g(x) be primitive polynomials in D|x]. Then f(x)g(x) is primitive. 


Proof 
Let f(x) = O79 aiv’ and g(x) = >>?) bja*. Suppose that p is a prime dividing the coefficients of f(x)g(x). Let r be 
the smallest integer such that p\notdividea, and s be the smallest integer such that p\notdivideb,. The coefficient of 
zs in f(x)g(x) is 
Crs = A0br+5 +A1bp45-1 +++ +Gr45-1b1 +Gr45b0. 


Since p divides ag,...,@,—1 and bo,...,bs_1, p divides every term of c,;, except for the term a,b,. However, since 
p | Cr+s, either p divides a, or p divides b,. But this is impossible. 


Lemma 18.25 


Let D be a UFD, and let p(x) and q(x) be in D[z]. Then the content of p(x)q(x) is equal to the product of the contents of 
p(x) and q(z). 


Proof 


Let p(x) =cpi(x) and q(x) =dqi(x), where c and d are the contents of p(x) and g(a), respectively. Then pi(2) and 
qi(z) are primitive. We can now write p(x)q(x) =cdpi(x)qi(x). Since pi(x)qi(x) is primitive, the content of 
p(x)q(x) must be cd. 


Theorem 18.26 


Let D be a UFD and F its field of fractions. Suppose that p(x) € D|x] and p(x) = f(x)g(x), where f(x) and g(x) are in 
F\z]. Then p(x)=fi(x)gi(x), where fi(x) and gi(x) are in D{x]|. Furthermore, deg f(x) =deg fi(x) and 
deg g(x) = deg 9: (2). 
Proof 
Let a and b be nonzero elements of D such that af(x),bg(x) are in D[a]. We can find a1,b1 € D such that 
af(z)=aifi(x) and bg(x) =bigi(x), where fi(x) and gi(x) are primitive polynomials in D[x]. Therefore, 
abp(z) = (ai fi(z))(bigi(x)). Since fi(x) and gi(x) are primitive polynomials, it must be the case that ab | aibi by 
Gauss's Lemma. Thus there exists a c€ D such that p(x) =cfi(x)gi(z). Clearly, deg f(x) =deg fi(x) and 
deg 9(x) = deg 91 (2). 


The following corollaries are direct consequences of Lemma 18.26. 


Corollary 18.27 


Let D be a UFD and F its field of fractions. A primitive polynomial p(z) in D|a] is irreducible in F'|x] if and only if it is 
irreducible in \(D[x]\text{.}\ 
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Corollary 18.28 


Let D be a UFD and F its field of fractions. If p(x) is a monic polynomial in D|x| with p(x) = f(x)g(x) in F[a], then 
p(x) = fi(a)gi (x), where f(x) and gi («) are in D[x]. Furthermore, deg f(x) = deg f, (x) and deg g(x) = deg gi (x). 


Theorem 18.29 


If D is a UFD, then D[a] is a UFD. 


Proof 


Let p(x) be a nonzero polynomial in D[x]. If p(x) is a constant polynomial, then it must have a unique factorization since 
D is a UFD. Now suppose that p(z) is a polynomial of positive degree in D[x]. Let F' be the field of fractions of D, and 
let p(x) = fi(x) fo(x)---fn(a) by a factorization of p(x), where each f;(x) is irreducible. Choose a; € D such that 
a; fi(x) is in D[a]. There exist b1,...,6, € D such that a; f;(z) = b;g;(x), where g;(x) is a primitive polynomial in 
D{x]|. By Corollary 18.27, each g; (x) is irreducible in D[x]. Consequently, we can write 


ay eielks! anp(x) = bj} eee bngi(z) a0 -Qn(Z). 
Let b=61---bn. Since gi(x)---gn(x) is primitive, a1---an divides b. Therefore, p(x) =agi(x)---gn(x), where 
a € D. Since D is a UFD, we can factor a as uci --- ck, where u is a unit and each of the c;'s is irreducible in D. 


We will now show the uniqueness of this factorization. Let 


p() =41 +++ Omfi(@)-+* fn(x) = br «+= brgi(z)- ++ gs(z) 


be two factorizations of p(x), where all of the factors are irreducible in D[x]. By Corollary 18.27 each of the f;'s and g;'s 
is irreducible in F'[x]. The a,'s and the 6,'s are units in F’. Since F[a] is a PID, it is a UFD; therefore, n =s. Now 
rearrange the g;(a)'s so that f;(a) and g;(a) are associates fori =1,...,m. Then there exist c1,...,¢p and dy,...,d, in 
D such that (¢;/d;)f;(z) = gi(x) or ¢; f;(x) = d;g;(x). The polynomials f;(2) and g;(x) are primitive; hence, c; and d; 
are associates in D. Thus, a1 --- @, = ub, ---b, in D, where wu is a unit in D. Since D is a unique factorization domain, 
m = s. Finally, we can reorder the b;'s so that a; and b; are associates for each 7. This completes the uniqueness part of the 
proof. 


The theorem that we have just proven has several obvious but important corollaries. 


Corollary 18.30 


Let F be a field. Then F|x] is a UFD 


Corollary 18.31 


The ring of polynomials over the integers, Z|x], is a UFD 


Corollary 18.32 


Let D be a UFD. Then D[z1,...,%n] is a UFD 


Remark 18.33 


It is important to notice that every Euclidean domain is a PID and every PID is a UFD. However, as demonstrated by our 
examples, the converse of each of these statements fails. There are principal ideal domains that are not Euclidean domains, and 
there are unique factorization domains that are not principal ideal domains (Z|). 
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Historical Note 


Karl Friedrich Gauss, born in Brunswick, Germany on April 30, 1777, is considered to be one of the greatest mathematicians who 
ever lived. Gauss was truly a child prodigy. At the age of three he was able to detect errors in the books of his father's business. 
Gauss entered college at the age of 15. Before the age of 20, Gauss was able to construct a regular 17-sided polygon with a ruler 
and compass. This was the first new construction of a regular n-sided polygon since the time of the ancient Greeks. Gauss 
succeeded in showing that if N = 2?" +1 was prime, then it was possible to construct a regular N-sided polygon. 


Gauss obtained his Ph.D. in 1799 under the direction of Pfaff at the University of Helmstedt. In his dissertation he gave the first 
complete proof of the Fundamental Theorem of Algebra, which states that every polynomial with real coefficients can be factored 
into linear factors over the complex numbers. The acceptance of complex numbers was brought about by Gauss, who was the first 
person to use the notation of i for \/—1. 


Gauss then turned his attention toward number theory; in 1801, he published his famous book on number theory, Disquisitiones 
Arithmeticae. Throughout his life Gauss was intrigued with this branch of mathematics. He once wrote, “Mathematics is the queen 
of the sciences, and the theory of numbers is the queen of mathematics.” 


In 1807, Gauss was appointed director of the Observatory at the University of Gottingen, a position he held until his death. This 
position required him to study applications of mathematics to the sciences. He succeeded in making contributions to fields such as 
astronomy, mechanics, optics, geodesy, and magnetism. Along with Wilhelm Weber, he coinvented the first practical electric 
telegraph some years before a better version was invented by Samuel F. B. Morse. 


Gauss was clearly the most prominent mathematician in the world in the early nineteenth century. His status naturally made his 
discoveries subject to intense scrutiny. Gauss's cold and distant personality many times led him to ignore the work of his 
contemporaries, making him many enemies. He did not enjoy teaching very much, and young mathematicians who sought him out 
for encouragement were often rebuffed. Nevertheless, he had many outstanding students, including Eisenstein, Riemann, Kummer, 
Dirichlet, and Dedekind. Gauss also offered a great deal of encouragement to Sophie Germain (1776-1831), who overcame the 
many obstacles facing women in her day to become a very prominent mathematician. Gauss died at the age of 78 in Gottingen on 
February 23, 1855. 
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18.3: Reading Questions 


Integral domains are an abstraction of which two fundamental rings that we have already studied? 
What are the various types of integral domains defined in this section? 
The field of fractions of a ring abstracts what idea from basic mathematics? 


In the previous chapter we had a theorem about irreducible polynomials generating maximal ideals. Which theorem in this 
chapter generalizes this previous result? 


Describe an example which is a UFD, but not a PID. 


7B ¢:B 7B 7B 
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18.4: Exercises 


Let z=a+bV3i be in Z[V3%].If a? +3b? =1, show that z must be a unit. Show that the only units of Z[/3 i] are 1 and 
=I 


The Gaussian integers, Z[i], are a UFD. Factor each of the following elements in Z/#] into a product of irreducibles. 


1.5 
2.1432 
3.6 +82 
4.2 


1. Prove that the field of fractions of F'[x], denoted by F'(x), is isomorphic to the set all rational expressions p(x)/q(z), 
where q(z) is not the zero polynomial. 
2. Let p(@1,.-.,%n) and q(a1,..., Zn) be polynomials in F'[x1, ..., |. Show that the set of all rational expressions 
(z1,-.-,;@n)/q(1,..., Ln) is isomorphic to the field of fractions of F'[x1,...,@n]. We denote the field of fractions of 
ilaciepeeens pl |Dyala (Canemerncen)e 


Let p be prime and denote the field of fractions of Z,[x] by Z, (a). Prove that Z,(x) is an infinite field of characteristic p. 
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Prove that the field of fractions of the Gaussian integers, Z[2], is 


Q(t) = {p +qi: p,q € Qh. 


A field F is called a prime field if it has no proper subfields. If F is a subfield of F and F is a prime field, then FE is a prime 
subfield of F’. 


1. Prove that every field contains a unique prime subfield. 
2. If F is a field of characteristic 0, prove that the prime subfield of F’ is isomorphic to the field of rational numbers, Q. 
3. If F is a field of characteristic p, prove that the prime subfield of F’ is isomorphic to Zp. 


Let Z[/2] = {a+ bV2:a,b€ Z}. 
1. Prove that Z[1/2] is an integral domain. 
2. Find all of the units in Z[,/2 ]. 
3. Determine the field of fractions of Z[v/2]. 
4. Prove that Z[1/2i] is a Euclidean domain under the Euclidean valuation v(a + by/2i) = a? + 207. 


Let D be a UFD. An element d € D is a greatest common divisor of a and b in D if d| a and d| b and d is divisible by any 
other element dividing both a and b. 


1. If D is a PID and a and 6 are both nonzero elements of D, prove there exists a unique greatest common divisor of a and b 
up to associates. That is, if d and d’ are both greatest common divisors of a and b, then d and d’ are associates. We write 
gcd(a, b) for the greatest common divisor of a and b. 

2. Let D be a PID and a and b be nonzero elements of D. Prove that there exist elements s and ¢ in D such that 
gcd(a, b) = as + bt. 


Let D be an integral domain. Define a relation on D by a ~ 6b if a and b are associates in D. Prove that ~ is an equivalence 
relation on D. 


Let D be a Euclidean domain with Euclidean valuation v. If u is a unit in D, show that v(w) = (1). 


Let D be a Euclidean domain with Euclidean valuation v. If a and 6 are associates in D, prove that v(a) = v(b). 


Show that Z[/5 i] is not a unique factorization domain. 


: 
f= 
fa 
' 
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Prove or disprove: Every subdomain of a UFD is also a UFD. 


An ideal of a commutative ring R is said to be finitely generated if there exist elements a,,...,a@, in R such that every 
element r in the ideal can be written as ajr1 +---+@nTpn for some r1,...,7, in R. Prove that R satisfies the ascending 
chain condition if and only if every ideal of R is finitely generated. 


Let D be an integral domain with a descending chain of ideals Jy D Iz > I3 D---. Suppose that there exists an N such that 
Iy =In for all k > N. A ring satisfying this condition is said to satisfy the descending chain condition, or DCC. Rings 
satisfying the DCC are called Artinian rings, after Emil Artin. Show that if D satisfies the descending chain condition, it must 
satisfy the ascending chain condition. 


Let R be a commutative ring with identity. We define a multiplicative subset of R to be a subset S such that 1 € S andabe S 
ifa,be S. 
1. Define a relation ~ on R x S by (a, s) ~ (a’, s’) if there exists an s* € S' such that s*(s’a — sa’) =0. Show that ~ is an 


equivalence relation on R x S. 
2. Let a/s denote the equivalence class of (a, s) € Rx S$ and let S~!R be the set of all equivalence classes with respect to 
~ . Define the operations of addition and multiplication on S~! R by 


a b at+bs 


ye st 
ab _ ab 
st st’ 


respectively. Prove that these operations are well-defined on $~!R and that S~1R is a ring with identity under these 
operations. The ring S~! R is called the ring of quotients of R with respect to S. 


Show that the map 7): R > S~'R defined by 7)(a) = a/1 is aring homomorphism. 

If R has no zero divisors and 0 ¢ S, show that 7 is one-to-one. 

Prove that P is a prime ideal of R if and only if S = R\ P is a multiplicative subset of R. 

. If P isa prime ideal of R and S = R\ P, show that the ring of quotients S~ R has a unique maximal ideal. Any ring that 
has a unique maximal ideal is called a local ring. 


Du pw 
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18.6: Sage 


We have already seen some integral domains and unique factorizations in the previous two chapters. In addition to what we have 
already seen, Sage has support for some of the topics from this section, but the coverage is limited. Some functions will work for 
some rings and not others, while some functions are not yet part of Sage. So we will give some examples, but this is far from 
comprehensive. 


Field of Fractions 


Sage is frequently able to construct a field of fractions, or identify a certain field as the field of fractions. For example, the ring of 
integers and the field of rational numbers are both implemented in Sage, and the integers “know” that the rationals is it's field of 
fractions. 


In other cases Sage will construct a fraction field, in the spirit of Lemma 18.3. So it is then possible to do basic calculations in the 
constructed field. 
Prime Subfields 


Corollary 18.7 says every field of characteristic p has a subfield isomorphic to Z,. For a finite field, the exact nature of this 
subfield is not a surprise, but Sage will allow us to extract it easily. 


More generally, the fields mentioned in the conclusions of Corollary 18.6 and Corollary 18.7 are known as the “prime subfield” of 
the ring containing them. Here is an example of the characteristic zero case. 


In a rough sense, every characteristic zero field contains a copy of the rational numbers (the fraction field of the integers), which 
can explain Sage's extensive support for rings and fields that extend the integers and the rationals. 
Integral Domains 


Sage can determine if some rings are integral domains and we can test products in them. However, notions of units, irreducibles or 
prime elements are not generally supported (outside of what we have seen for polynomials in the previous chapter). Worse, the 
construction below creates a ring within a larger field and so some functions (such as_.iS_unit() ) pass through and give 
misleading results. This is because the construction below creates a ring known as an “order in a number field.” 


The following is a bit misleading, since 4, as an element of Z[./3i] does not have a multiplicative inverse, though seemingly we 
can compute one. 

Principal Ideals 

When a ring is a principal ideal domain, such as the integers, or polynomials over a field, Sage works well. Beyond that, support 


begins to weaken. 
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18.7: Sage Exercises 


There are no Sage exercises for this section. 
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CHAPTER OVERVIEW 


19: Lattices and Boolean Algebras 


The axioms of a ring give structure to the operations of addition and multiplication on a set. However, we can construct algebraic 
structures, known as lattices and Boolean algebras, that generalize other types of operations. For example, the important operations 
on sets are inclusion, union, and intersection. Lattices are generalizations of order relations on algebraic spaces, such as set 
inclusion in set theory and inequality in the familiar number systems N, Z, Q, and R. Boolean algebras generalize the operations of 
intersection and union. Lattices and Boolean algebras have found applications in logic, circuit theory, and probability. 

19.1: Lattices 

19.2: Boolean Algebras 

19.3: The Algebra of Electrical Circuits 

19.4: Reading Questions 

19.5: Exercises 

19.6: Programming Exercises 

19.7: References and Suggested Readings 

19.8: Sage 

19.9: Sage Exercises 


This page titled 19: Lattices and Boolean Algebras is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, 
and/or curated by Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of 


the LibreTexts platform; a detailed edit history is available upon request. 


Oibretexts: 


19.1: Lattices 


Partially Ordered Sets 


We begin the study of lattices and Boolean algebras by generalizing the idea of inequality. Recall that a relation on a set X is a 
subset of X x X. A relation P on X is called a partial order of X if it satisfies the following axioms. 


1. The relation is reflexive: (a,a) € P foralla € X. 

2. The relation is antisymmetric: if (a,b) € P and (b,a) € P, thena =b. 

3. The relation is transitive: if (a,b) € P and (b,c) € P, then (a,c) € P. 
We will usually write a < b to mean (a, b) € P unless some symbol is naturally associated with a particular partial order, such as 
a <b with integers a and b, or A C B with sets A and B. A set X together with a partial order ~ is called a partially ordered set, 
or poset. 


Example 19.1 


The set of integers (or rationals or reals) is a poset where 


Solution 


a <b has the usual meaning for two integers a and 6 in Z. 


Example 19.2 


Let X be any set. We will define the power set of X to be the set of all subsets of X. We denote the power set of X by P(X). 
For example, let X = {a, b,c}. Then 


Solution 
P(X) is the set of all subsets of the set {a, b, c}: 


0 {a} {b} {c} 
{a,b} {a,c} {b,c} {a,b,c}. 


On any power set of a set X, set inclusion, C , is a partial order. We can represent the order on {a, b,c} schematically by a 
diagram such as the one in Figure 19.3. 
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Figure 19.3. Partial order on P({a, b, c}) 


Example 19.4 


Let G be a group. The set of subgroups of G is a 
Solution 


poset, where the partial order is set inclusion. 


Example 19.5 


There can be more than one partial order on a particular set. We can form a partial order on N by a Xb if a| b. The relation is 
certainly reflexive since a| a for alla € N. Ifm|mnandn|m, then 


Solution 


m =n; hence, the relation is also antisymmetric. The relation is transitive, because if m | n and n| p, then m | p. 


Example 19.6 


Let X = {1, 2,3, 4, 6, 8, 12, 24}be the set of divisors of 24 with the partial order defined in Example 19.5. 


Solution 


Figure 19.7 shows the partial order on X. 
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Figure 19.7.A partial order on the divisors of 24 


Let Y be a subset of a poset X. An element u in X is an upper bound of Y if a x u for every element a € Y. If u is an upper 
bound of Y such that w < v for every other upper bound v of Y, then wu is called a least upper bound or supremum of Y. An 


element ! in X is said to be a lower bound of Y if! <a for alla € Y. If lis a lower bound of Y such that k <1 for every other 
lower bound k of Y, then J is called a greatest lower bound or infimum of Y . 


Example 19.8 


Let Y = {2, 3, 4, 6} be contained in the set X of Example 19.6. Then 
Solution 


Y has upper bounds 12 and 24, with 12 as a least upper bound. The only lower bound is 1; hence, it must be a greatest lower 
bound. 


As it turns out, least upper bounds and greatest lower bounds are unique if they exist. 


Theorem 19.9 


Let Y be a nonempty subset of a poset X.If Y has a least upper bound, then Y has a unique least upper bound. If Y has a 
greatest lower bound, then Y has a unique greatest lower bound. 


Proof 


Let uw; and uz be least upper bounds for Y. By the definition of the least upper bound, wu; = wu for all upper bounds u of 
Y. In particular, vw; < u2. Similarly, uw, < uz. Therefore, uw; = uz by antisymmetry. A similar argument show that the 
greatest lower bound is unique. 


On many posets it is possible to define binary operations by using the greatest lower bound and the least upper bound of two 
elements. A lattice is a poset L such that every pair of elements in L has a least upper bound and a greatest lower bound. The least 
upper bound of a, b € L is called the join of a and 6 and is denoted by a V b. The greatest lower bound of a,b € L is called the 
meet of a and b and is denoted by a/b. 


Example 19.10 


Let X be a set. Then the power set of X, P(X), is a lattice. For two sets 


Solution 


A and B in P(X), the least upper bound of A and B is AUB. Certainly AUB is an upper bound of A and B, since 
ACAUB and BC AUB. If C is some other set containing both A and B, then C must contain AU B; hence, AU B is 
the least upper bound of A and B. Similarly, the greatest lower bound of A and B is AN B. 
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Example 19.11 


Let G be a group and suppose that X is the set of subgroups of G. Then 
Solution 


X is a poset ordered by set-theoretic inclusion, C . The set of subgroups of G is also a lattice. If H and K are subgroups of G, 
the greatest lower bound of H and K is HM K. The set HUK may not be a subgroup of G. We leave it as an exercise to 
show that the least upper bound of H and K is the subgroup generated by HU K. 


In set theory we have certain duality conditions. For example, by De Morgan's laws, any statement about sets that is true about 
(AUB) must also be true about A’M B’. We also have a duality principle for lattices. 


Axiom 19.12. Principle of Duality 


Any statement that is true for all lattices remains true when = is replaced by = and V and ( are interchanged throughout the 
statement 


The following theorem tells us that a lattice is an algebraic structure with two binary operations that satisfy certain axioms. 


Theorem 19.13 


If L is a lattice, then the binary operations V and \ satisfy the following properties for a, b,c € L. 


1. Commutative laws:aVb=bVa andaA\b=bAa. 

2. Associative laws: aV (bVc) =(aVb)Vec andaA(bAc)=(aANb)Ac. 
3. Idempotent laws:aVa=a anda/\a=a. 

4. Absorption laws: aV (ab) =a anda/(aVb)=a. 


Proof 
By the Principle of Duality, we need only prove the first statement in each part. 


(1) By definition a Vb is the least upper bound of {a,b}, and bVa is the least upper bound of {b,a}; however, 
{a, b} = {b, a}. 
(2) We will show that aV(bVc) and (aVb)Vc are both least upper bounds of {a,b,c}. Let d=aVb. Then 
cxdVc=(aVb)Vc. Wealso know that 

axaVb=dxdVc=(aVvb)Ve. 


A similar argument demonstrates that b < (a Vb) Vc. Therefore, (a Vb) Vc is an upper bound of {a, b, c}. We now need 
to show that (a Vb) Vc is the least upper bound of {a, b,c}.Let u be some other upper bound of {a, b,c}. Then a x u 
and b <u; hence, d=aVb~<u. Since c <u, it follows that (aVb)Vc=dVcx<u. Therefore, (aVb)Vc must be 
the least upper bound of {a, b, c}.The argument that shows a V (bVc) is the least upper bound of {a, b, c} is the same. 
Consequently, a V (bV c) =(aVb) Vc. 


(3) The join of a and a is the least upper bound of {a}; hence, aVa =a. 


(4) Letd=aAb. Thena xaVd. On the other hand, d=aAb~<a, andsoaVd ~<a. Therefore, aV (a/b) =a. 


Given any arbitrary set L with operations V and A, satisfying the conditions of the previous theorem, it is natural to ask whether or 
not this set comes from some lattice. The following theorem says that this is always the case. 


Theorem 19.14 


Let L be a nonempty set with two binary operations V and /\ satisfying the commutative, associative, idempotent, and 
absorption laws. We can define a partial order on L bya xb ifa\Vb=b. Furthermore, L is a lattice with respect to = if for 
all a, b € L, we define the least upper bound and greatest lower bound of a and b bya b anda/ b, respectively. 


Proof 
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We first show that Z is a poset under x. SinceaVa=a, a ~<a and ~ is reflexive. To show that = is antisymmetric, let 
a~x<bandb x<a. ThenaVb=b andbVa=a. By the commutative law,b=aVb=bVa=a. Finally, we must show 
that < is transitive. Leta x b andb xc. ThenaVb=b andb\Vc=c. Thus, 


aVc=aV (bVc)=(aVb)Vc=bVc=c, 


ora xc. 


To show that L is a lattice, we must prove that a Vb anda/ b are, respectively, the least upper and greatest lower bounds 
of a and b. Sincea=(aVb)Aa=aA(aVb), _ it follows thata<aVb. Similarly, b<avVb. Therefore, aV 6 is an 
upper bound for a and b. Let wu be any other upper bound of both a and b. Thena xu andb <u. ButaVb~u since 


(aVb)Vu=aV (bVu) =aVu=u. 


The proof that a / b is the greatest lower bound of a and 6 is left as an exercise. 


This page titled 19.1: Lattices is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or curated by 
Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the LibreTexts 
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19.2: Boolean Algebras 


Let us investigate the example of the power set, P(X), of a set X more closely. The power set is a lattice that is ordered by 
inclusion. By the definition of the power set, the largest element in P(X) is X itself and the smallest element is 0, the empty set. 
For any set A in P(X), we know that AN X = A and AU@=A. This suggests the following definition for lattices. An element 
I ina poset X is a largest element if a x I for alla € X. An element O is a smallest element of X ifO <a forallac X. 


Let A be in P(X). Recall that the complement of A is 
A =X\A={a:2€Xandz¢ A}. 


We know that AU A’ = X and AN A’ =@. We can generalize this example for lattices. A lattice L with a largest element J anda 
smallest element O is complemented if for each a € L, there exists an a’ such thata Va’ =I andaAa’ =O. 


In a lattice LZ, the binary operations V and A satisfy commutative and associative laws; however, they need not satisfy the 
distributive law 


aN (bVc)=(aAb)V (adc); 
however, in P(X) the distributive law is satisfied since 
AN (BUC) = (ANB)U(ANC) 
for A, B,C € P(X). We will say that a lattice L is distributive if the following distributive law holds: 
aN\(bVc)=(aAb)V (adc) 


for alla, b,c € L. 


Theorem 19.15 


A lattice L is distributive if and only if 
aV (bAc)=(aVb)A(aVc) 
for alla,b,c€ L. 
Proof 
Let us assume that L is a distributive lattice. 


aV(bAc) =[aV(aAc)| V(bAc) 


=[(aVb) Aa] V [(aVb) Ac| 
=(aVb)A(aVc). 


The converse follows directly from the Duality Principle. 


A Boolean algebra is a lattice B with a greatest element J and a smallest element O such that B is both distributive and 
complemented. The power set of X, P(X), is our prototype for a Boolean algebra. As it turns out, it is also one of the most 
important Boolean algebras. The following theorem allows us to characterize Boolean algebras in terms of the binary relations V 
and / without mention of the fact that a Boolean algebra is a poset. 


Theorem 19.16 


Aset B is a Boolean algebra if and only if there exist binary operations V and / on B satisfying the following axioms. 


l.aVb=bVa andaAb=bAa fora,bE B. 
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2.aV(bVc)=(aVb)Ve andaA(bAc)=(aAb)Ac fora,b,ceE B. 
3.aA\(bVc)=(aAb)V(aAc) andaV(bAc)=(aVb)A(aVc) fora,b,cE B. 
4. There exist elements I and O such thata VO =a anda/AI =a foralla€ B. 
5. For every a € B there exists ana’ € B such thataV a’ =I andaAa' =O. 
Proof 
Let B be a set satisfying (1)-(5) in the theorem. One of the idempotent laws is satisfied since 
a=aVO 
=aV(aAa’) 
=(aVa)A(aVa’) 
=(aVa)AI 
=aVa. 
Observe that 
IVb=(6VU)Vb=(0Vb)Vb=U'V (bVb) =U Vb=I. 
Consequently, the first of the two absorption laws holds, since 
aV(aAb) =(aAI)V (ab) 
=aA(IVb) 


=aAl 
— 0 


The other idempotent and absorption laws are proven similarly. Since B also satisfies (1)—(3), the conditions of Theorem 
19.14are met; therefore, B must be a lattice. Condition (4) tells us that B is a distributive lattice. 


Fora € B, OVa=a; hence, O <a and O is the smallest element in B. To show that I is the largest element in B, we 
will first show that a V b = b is equivalent toaA\b=a. SinceaV I =a forall a€ B, using the absorption laws we can 
determine that 


aVI=(aAI)VI=IV (IAa)=I 
ora xT forall a in B. Finally, since we know that B is complemented by (5), B must be a Boolean algebra. 


Conversely, suppose that B is a Boolean algebra. Let J and O be the greatest and least elements in B, respectively. If we 
define aV b anda/b as least upper and greatest lower bounds of {a, b}, then B is a Boolean algebra by Theorem 19.14 
Theorem 19.15 and our hypothesis. 


Many other identities hold in Boolean algebras. Some of these identities are listed in the following theorem. 


Theorem 19.17 


Let B be a Boolean algebra. Then 
1.aVI=I anda\O=O foralla€ B. 
2. IfaVvVb=aVc andaAb=adc fora,b,c€ B, thenb=c. 


3. IfaVb=I andaA\b=O, thenb=a’. 

4. (a')' =a foralla€ B. 

5. I'=O and O' =I. 

6. (a Vb)! =a' Ab! and (aAb)' =a' Vb! (De Morgan's Laws). 


Proof 


We will prove only (2). The rest of the identities are left as exercises. Fora Vb=aVc andaAb=a/c, wehave 
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Finite Boolean Algebras 


A Boolean algebra is a finite Boolean algebra if it contains a finite number of elements as a set. Finite Boolean algebras are 
particularly nice since we can classify them up to isomorphism. 


Let B and C be Boolean algebras. A bijective map ¢: B — C' is an isomorphism of Boolean algebras if 


o(avb) = g(a) Vv o(0) 

o(ab) = d(a)Ao(0) 
for all a and b in B. 
We will show that any finite Boolean algebra is isomorphic to the Boolean algebra obtained by taking the power set of some finite 
set X. We will need a few lemmas and definitions before we prove this result. Let B be a finite Boolean algebra. An element 
a€ Bisanatomof Bifa#O andaAb=a forallb€ B with b £ O. Equivalently, a is an atom of B if there is no b € B with 
b £O distinct from a such that O <b Xa. 


Lemma 19.18 


Let B be a finite Boolean algebra. If b is a element of B with b 4 O, then there is an atom a in B such that a x b. 


Proof 


If b is an atom, let a = b. Otherwise, choose an element 6), not equal to O or b, such that b; < b. We are guaranteed that 
this is possible since 6 is not an atom. If 6; is an atom, then we are done. If not, choose b2, not equal to O or by, such that 
bp x b,. Again, if by is an atom, let a = by. Continuing this process, we can obtain a chain 


O xX---<b3 X by Xb; Xb. 


Since B is a finite Boolean algebra, this chain must be finite. That is, for some k, by is an atom. Let a = bx. 


Lemma 19.19 


Let a and b be atoms ina finite Boolean algebra B such that a # b. Thena Ab = O. 


Proof 
Since a/b is the greatest lower bound of a and 6b, we know that aAb~<a. Hence, either aAb=a oraAb=O. 
However, if a/b =a, then either a x b ora =O. In either case we have a contradiction because a and 6 are both atoms; 
therefore, a/b = O. 
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Lemma 19.20 


Let B be a Boolean algebra and a, b € B. The following statements are equivalent. 


lLaxb. 
2aAb' =O. 
3.a’/Vb=T. 
Proof 


(1) => (2). Ifa xb, thenaVb=b. Therefore, 
a\b’ =a\(avb)' 


(2) > (3). Ifa Ab’ =O, thena’ Vb=(aAb')' =O' =I. 
(3) > (4). Ifa’ Vb =T, then 


a =a (a' Vb) 
=(aAa’)\V (aAb) 


Thus, a x b. 


Let B be a Boolean algebra and b and c be elements in B such that b 4 c. Then there exists an atom a € B such that a xb 
anda Kc. 


Proof 
By Lemma 19.20 b/c’ #O. Hence, there exists an atom a such that a x b/c’. Consequently, a x b anda Kc. 


Let b € B and ay,...,@n be the atoms of B such that a; x b. Then b=a,\V---Va,y. Furthermore, if a,ai,...,@n are 
atoms of B such that a x b, a; Xb, andb=aVa,V---Van, thena=a,; forsomei =1,...,n. 
Proof 


Let b} =a, V---Va,. Since a; < b for each 7, we know that b; ~< b. If we can show that b < b;, then the lemma is true 
by antisymmetry. Assume b Z b;. Then there exists an atom a such that a < b anda Z 6. Since a is an atom and a <b, 
we can deduce that a = a; for some a;. However, this is impossible since a < b;. Therefore, b = bj. 


Now suppose that b =a; V--- Vay. Ifa is an atom less than b, 
a=a\b=aA (a, V--: Van) =(aAai)V---V (aAan). 


But each term is O or a witha Aa, occurring for only one a;. Hence, by Lemma 19.19 a = a; for some i. 


Theorem 19.23 


Let B be a finite Boolean algebra. Then there exists a set X such that B is isomorphic to P(X). 


Proof 
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We will show that B is isomorphic to P(X), where X is the set of atoms of B. Let a € B. By Lemma 19.22 we can write 
a uniquely asa =a ,V---Van fora,,...,a, € X. Consequently, we can define a map ¢: B— P(X) by 


$(a) = (a1 V- ++ Van) = {a1,.-., an}. 
Clearly, ¢ is onto. 


Now let a=a,V---Va, and b=b,V---Vbm, be elements in B, where each a; and each 6; is an atom. If 
(a) = ¢(b), then {a1,..., an} = {b1,...,bm}and a =b. Consequently, ¢ is injective. 
The join of a and b is preserved by ¢ since 
g(aVb) =(a1V---VanV bi V--+V bm) 

= {Chin acca @paliigaoss Mia} 

={a1,...,a@n}U{b1,..., bm} 

= (a1 V--- Van) Ub(b1 A- ++ V bm) 

= (a) U4(). 
Similarly, @(a A b) = g(a) 7 4(b). 


We leave the proof of the following corollary as an exercise. 


Corollary 19.24 


The order of any finite Boolean algebra must be 2” for some positive integer n. 


This page titled 19.2: Boolean Algebras is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or 
curated by Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the 
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19.3: The Algebra of Electrical Circuits 


The usefulness of Boolean algebras has become increasingly apparent over the past several decades with the development of the 
modern computer. The circuit design of computer chips can be expressed in terms of Boolean algebras. In this section we will 
develop the Boolean algebra of electrical circuits and switches; however, these results can easily be generalized to the design of 
integrated computer circuitry. 


A switch is a device, located at some point in an electrical circuit, that controls the flow of current through the circuit. Each switch 
has two possible states: it can be open, and not allow the passage of current through the circuit, or a it can be closed, and allow the 
passage of current. These states are mutually exclusive. We require that every switch be in one state or the other—a switch cannot 
be open and closed at the same time. Also, if one switch is always in the same state as another, we will denote both by the same 
letter; that is, two switches that are both labeled with the same letter a will always be open at the same time and closed at the same 
time. 


Given two switches, we can construct two fundamental types of circuits. Two switches a and 6 are in series if they make up a 
circuit of the type that is illustrated in Figure 19.25. Current can pass between the terminals A and B in a series circuit only if both 
of the switches a and 6 are closed. We will denote this combination of switches by a b. Two switches a and 6 are in parallel if 
they form a circuit of the type that appears in Figure 19.26. In the case of a parallel circuit, current can pass between A and B if 
either one of the switches is closed. We denote a parallel combination of circuits a and b by aV b. 


A a b B 


Figure 19.25.aAb 
a 


b 


Figure 19.26.aV b 


We can build more complicated electrical circuits out of series and parallel circuits by replacing any switch in the circuit with one 
of these two fundamental types of circuits. Circuits constructed in this manner are called series-parallel circuits. 


We will consider two circuits equivalent if they act the same. That is, if we set the switches in equivalent circuits exactly the same 
we will obtain the same result. For example, in a series circuit a/b is exactly the same as b/a. Notice that this is exactly the 
commutative law for Boolean algebras. In fact, the set of all series-parallel circuits forms a Boolean algebra under the operations of 
V and A. We can use diagrams to verify the different axioms of a Boolean algebra. The distributive law, 

a/\(bVc)=(aAb)V(aAc), is illustrated in Figure 19.27. If a is a switch, then a’ is the switch that is always open when a is 
closed and always closed when a is open. A circuit that is always closed is I in our algebra; a circuit that is always open is O. The 
laws foraAa’ =O andaVa! =I are shown in Figure19.28 


r-— b— a—b 


a = = 
c — a-—¢— 


Figure 19.27.a/\ (bVc) =(aAb)V (aAc) 


—- | + 


Figure 19.28.a\a'=O andaVa' =I 
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Example 19.29 


Every Boolean expression represents a switching circuit. For example, given the expression (a V b) A (a V b') A (aV b), 
Solution 


we can construct the circuit in Figure 19.32. 


Theorem 19.30 


The set of all circuits is a Boolean algebra 


We leave as an exercise the proof of this theorem for the Boolean algebra axioms not yet verified. We can now apply the techniques 
of Boolean algebras to switching theory. 


Example 19.31 


Given a complex circuit, we can now apply the techniques of Boolean algebra to reduce it to a simpler one. Consider the circuit 
in Figure 19.32 Since 


(aVb)A(aVb')A(avb) =(aVb)A(avb)A(avet') 
=(avb)A(avb') 
=aV(bA0') 
=aVO 
=a, 


Solution 


we can replace the more complicated circuit with a circuit containing the single switch a and achieve the same function. 


“LHL, 


Figure 19.32.(aV b) A (aV b') A (aV b) 


Historical Note 


George Boole (1815-1864) was the first person to study lattices. In 1847, he published The Investigation of the Laws of Thought, a 
book in which he used lattices to formalize logic and the calculus of propositions. Boole believed that mathematics was the study of 
form rather than of content; that is, he was not so much concerned with what he was calculating as with how he was calculating it. 
Boole's work was carried on by his friend Augustus De Morgan (1806-1871). De Morgan observed that the principle of duality 
often held in set theory, as is illustrated by De Morgan's laws for set theory. He believed, as did Boole, that mathematics was the 
study of symbols and abstract operations. 


Set theory and logic were further advanced by such mathematicians as Alfred North Whitehead (1861-1947), Bertrand Russell 
(1872-1970), and David Hilbert (1862-1943). In Principia Mathematica, Whitehead and Russell attempted to show the connection 
between mathematics and logic by the deduction of the natural number system from the rules of formal logic. If the natural 
numbers could be determined from logic itself, then so could much of the rest of existing mathematics. Hilbert attempted to build 
up mathematics by using symbolic logic in a way that would prove the consistency of mathematics. His approach was dealt a 
mortal blow by Kurt Gédel (1906-1978), who proved that there will always be “undecidable” problems in any sufficiently rich 
axiomatic system; that is, that in any mathematical system of any consequence, there will always be statements that can never be 
proven either true or false. 


As often occurs, this basic research in pure mathematics later became indispensable in a wide variety of applications. Boolean 
algebras and logic have become essential in the design of the large-scale integrated circuitry found on today's computer chips. 
Sociologists have used lattices and Boolean algebras to model social hierarchies; biologists have used them to describe biosystems. 
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19.4: Reading Questions 


Describe succinctly what a poset is. Do not just list the defining properties, but give a description that another student of 
algebra who has never seen a poset might understand. For example, part of your answer might include what type of common 
algebraic topics a poset generalizes, and your answer should be short on symbols. 


How does a lattice differ from a poset? Answer this in the spirit of the previous question. 


How does a Boolean algebra differ from a lattice? Again, answer this in the spirit of the previous two questions. 


Give two (perhaps related) reasons why any discussion of finite Boolean algebras might center on the example of the power set 
of a finite set. 


Describe a major innovation of the middle twentieth century made possible by Boolean algebra. 


cs 
és 
E 
c 
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19.5: Exercises 


Draw the lattice diagram for the power set of X = {a, b, c,d} with the set inclusion relation, C . 
Draw the diagram for the set of positive integers that are divisors of 30. Is this poset a Boolean algebra? 


| Draw a diagram of the lattice of subgroups of Zj9. 


Let B be the set of positive integers that are divisors of 210. Define an order on B by a Xb if a| b. Prove that B is a Boolean 
algebra. Find a set X such that B is isomorphic to P(X). 


Prove or disprove: Z is a poset under the relation a < b if a | b. 


Draw the switching circuit for each of the following Boolean expressions. 


1.(aVbVa')Aa 

2. (aV b)’ A (aVb) 

3.aV (a/b) 

4. (cVaVb)Ac A(aVb)’ 


| Draw a circuit that will be closed exactly when only one of three switches a, b, and c are closed. 


Prove or disprove that the two circuits shown are equivalent. 
a-—b-e a-—b 
[ a’—b 7 
| a-c | L a-c 


must be 2” for some n € N. 


| Let X be a finite set containing n elements. Prove that |P(X)| = 2”. Conclude that the order of any finite Boolean algebra 
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For each of the following circuits, write a Boolean expression. If the circuit can be replaced by one with fewer switches, give 
the Boolean expression and draw a diagram for the new circuit. 


a — 0b’ 


a-b-e 
a’-U'-c 
a—b =c 


Prove or disprove: The set of all nonzero integers is a lattice, where a ~ b is defined by a | b. 


Let LZ be a nonempty set with two binary operations V and A satisfying the commutative, associative, idempotent, and 
absorption laws. We can define a partial order on L, as in Theorem 19.14 bya <b ifaVb=b. Prove that the greatest lower 
bound of a and bisa b. 


Let G be a group and X be the set of subgroups of G ordered by set-theoretic inclusion. If H and K are subgroups of G, show 
that the least upper bound of H and K is the subgroup generated by HU K. 
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Let R be a ring and suppose that X is the set of ideals of R. Show that X is a poset ordered by set-theoretic inclusion, C . 
Define the meet of two ideals J and J in X by IM J and the join of J and J by J+ J. Prove that the set of ideals of Ris a 
lattice under these operations. 


Let B be a Boolean algebra. Prove each of the following identities. 


1l.aVI=I anda\O=O foralla€ B. 

2.lfaVb=I andaAb=O, thenb=a’. 

3. (a’)' =a forallac B. 

4.I'=O andO' =I. 

5. (aVb)! =a' Ab’ and (aAb)' =a’ V0 (De Morgan's laws). 


By drawing the appropriate diagrams, complete the proof of Theorem 19.30 to show that the switching functions form a 
Boolean algebra. 


Let B be a Boolean algebra. Define binary operations + and - on B by 
a+b =(aAv')V(a' Ab) 
a-b =aJAb. 


Prove that B is a commutative ring under these operations satisfying a? = a for alla € B. 


Let X be a poset such that for every a and b in X, either a <x b or b Xa. Then X is said to be a totally ordered set. 


1. Is a] a total order on N? 
2. Prove that N, Z, Q, and R are totally ordered sets under the usual ordering < . 


: 
; 
E 


Let X and Y be posets. A map ¢: X —> Y is order-preserving if a < b implies that (a) < ¢(b). Let L and M be lattices. A 
map w:L— M is a lattice homomorphism if w(a Vb) =%(a) V(b) and (aA b) =y(a)AY(b). Show that every 
lattice homomorphism is order-preserving, but that it is not the case that every order-preserving homomorphism is a lattice 
homomorphism. 


Let B be a Boolean algebra. Prove that a = 6 if and only if (aA b') V(a’Ab) =O fora,be B. 


Let B be a Boolean algebra. Prove that a = O if and only if (aA b’) V(a’Ab) =b forallb€ B. 
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Let LZ and M be lattices. Define an order relation on L x M by (a,b) X (c,d) ifaxc and 6 Xd. Show that Lx M isa 
lattice under this partial order. 
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19.6: Programming Exercises 


A Boolean or switching function on n variables is a map f : {O, I}” — {0, I}. A Boolean polynomial is a special type of 
Boolean function: it is any type of Boolean expression formed from a finite combinatio4n of variables z,,..., 2, together 
with O and J, using the operations V, A, and’. The values of the functions are defined in Table 19.33. Write a program to 
evaluate Boolean polynomials. 


\(Table \text { } 19.33.\) Boolean polynomials 


z y x! zVy zAy 
0 0 1 0 0 
0 1 1 1 0 
1 0 0 1 0 
1 1 0 1 1 
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19.8: Sage 
Sage has support for both partially ordered sets (“posets”) and lattices, and does an excellent job of providing visual depictions of 
both. 


Creating Partially Ordered Sets 


Example 19.6 in the text is a good example to replicate as a demonstration of Sage commands. We first define the elements of the 
set X. 


One approach to creating the relation is to specify every instance where one element is comparable to the another. So we build a list 
of pairs, where each pair contains comparable elements, with the lesser one first. This is the set of relations. 


We construct the poset by giving the the Poset constructor a list containing the elements and the relations. We can then easily 
get a “plot” of the poset. Notice the plot just shows the “cover relations” — a minimal set of comparisons which the assumption of 
transitivity would expand into the set of all the relations. 


Another approach to creating a Poset is to let the poset constructor run over all the pairs of elements, and all we do is give the 
constructor a way to test if two elements are comparable. Our comparison function should expect two elements and then return 

True or False . A “lambda” function is one way to quickly build such a function. This may be a new idea for you, but 
mastering lambda functions can be a great convenience. Notice that “lambda” is a word reserved for just this purpose (so, for 
example, lambda is a bad choice for the name of an eigenvalue of a matrix). There are other ways to make functions in Sage, 
but a lambda function is quickest when the function is simple. 


Sage also has a collection of stock posets. Some are one-shot constructions, while others are members of parameterized families. 
Use tab-completionon Posets. tosee the full list. Here are some examples. 


A one-shot construction. Perhaps what you would expect, though there might be other, equally plausible, alternatives. 


A parameterized family. This is the classic example where the elements are subsets of a set with n elements and the relation is 
“subset of.” 


And random posets. These can be useful for testing and experimenting, but are unlikely to exhibit special cases that may be 
important. You might run the following command many times and vary the second argument, which is a rough upper bound on the 
probability any two elements are comparable. Remember that the plot only shows the cover relations. The more elements that are 
comparable, the more “vertically stretched” the plot will be. 


Properties of a Poset 


Once you have a poset, what can you do with it? Let's return to our first example, D . We can of course determine if one element 
is less than another, which is the fundamental structure of a poset. 


Notice that 6 and 8 are not comparable in this poset (it is a partial order). The methods .is_gequal() and 
.is_greater_than() work similarly, but returns True _ if the first element is greater (or equal). 


We can find the largest and smallest elements of a poset. This is a random poset built with a 10%probability, but copied here to be 
repeatable. 


Elements of a poset can be partioned into level sets. In plots of posets, elements at the same level are plotted vertically at the same 
height. Each level set is obtained by removing all of the previous level sets and then taking the minimal elements of the result. 


If we make two elements in R comparable when they had not previously been, this is an extension of R . Consider all possible 
extensions of one poset — we can make a poset from all of these, where set inclusion is the relation. A linear extension is a 
maximal element in this poset of posets. Informally, we are adding as many new relations as possible, consistent with the original 
poset and so that the result is a total order. In other words, there is an ordering of the elements that is consistent with the order in 
the poset. We can build such a thing, but the output is just a list of the elements in the linear order. A computer scientist would be 
inclined to call this a “topological sort.” 


We can construct subposets by giving a set of elements to induce the new poset. Here we take roughly the “bottom half” of the 
random poset P by inducing the subposet on a union of some of the level sets. 


The dual of a poset retains the same set of elements, but reverses any comparisons. 
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Taking the dual of the divisibility poset from Example 19.6 would be like changing the relation to “is a multiple of.” 


Lattices 


Every lattice is a poset, so all the commands above will perform equally well for a lattice. But how do you create a lattice? Simple 
— first create a poset and then feed it into the LatticePoset() constructor. But realize that just because you give this 
constructor a poset, it does not mean a lattice will always come back out. Only if the poset is already a lattice will it get upgraded 
from a poset to a lattice for Sage's purposes, and you will geta ValueError ifthe upgrade is not possible. Finally, notice that 
some of the posets Sage constructs are already recognized as lattices, such as the prototypical BooleanLattice . 


An integer composition of n is a list of positive integers that sum to n. A composition C covers a composition Cz if Cz can be 
formed from C by adding consecutive parts. For example, Cy = [2, 1,2] > [3,2] =C . With this relation, the set of all integer 
compositions of a fixed integer n is a poset that is also a lattice. 


A meet or a join is a fundamental operation in a lattice. 
Once a poset is upgraded to lattice status, then additional commands become available, or the character of their results changes. 
An example of the former isthe .is_distributive() method. 


An example of the latter is the .top() method. What your text calls a largest element and a smallest element of a lattice, Sage 
calls a top and a bottom. Fora poset, .top() and .bottom() may return an element or may not (returning None ), but 
for a lattice it is guaranteed to return exactly one element. 


Notice that the returned values are all elements of the lattice, in this case ordered lists of integers summing to 5. 


Complements now make sense in a lattice. The result of the .complements() method is a dictionary that uses elements of the 
lattice as the keys. We say the dictionary is “indexed” by the elements of the lattice. The result is a list of the complements of the 
element. We call this the “value” of the key-value pair. (You may know dictionaries as “associative arrays”, but they are really just 
fancy functions.) 


The lattice of integer compositions is a complemented lattice, as we can see by the result that each element has a single (unique) 
complement, evidenced by the lists of length 1 in the values of the dictionary. Or we can just ask Sage via 

.is_complemented() . Dictionaries have no inherent order, so you may get different output each time you inspect the 
dictionary. 


There are many more commands which apply to posets and lattices, so build a few and use tab-completion liberally to explore. 
There is more to discover than we can cover in just a single chapter, but you now have the basic tools to profitably study posets and 
lattices in Sage. 
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19.9: Sage Exercises 


Use R = Posets.RandomPoset(30,0.05) to construct a random poset. Use R.plot() to get an idea of what 
you have built. 


1. Illustrate the use of the poset methods: .is_lequal() , .is_less_than() , .is_gequal() ,and 
.is_greater_than()_ to determine if two specific elements (of your choice) are related or incomparable. 
2.Use .minimal_elements() and .maximal_elements()_ to find the smallest and largest elements of your 
poset. 
3.Use LatticePoset(R) toseeifthe poset R isa lattice by attempting to convert it into a lattice. 
4. Find a linear extension of your poset. Confirm that any pair of elements that are comparable in the poset will be similarly 
comparable in the linear extension. 


Construct the poset on the positive divisors of 72 = 2° - 3? with divisiblity as the relation, and then convert to a lattice. 


1. Determine the one and zero element using .top() and .bottom() . 
2. Determine all the pairs of elements of the lattice that are complements of each other without using the 
.complement() method, but rather just use the .meet() and .join() methods. Extra credit if you can output 
each pair just once. 
3. Determine if the lattice is distributive using just the .meet() and .j0in() methods, and not the 
.is_distributive() method. 


Construct several specific diamond lattices with Posets.DiamondPoset(n)_ by varying the value of n . Once you 
feel you have enough empirical evidence, give answers, with justifications, to the following questions for general values of n, 
based on observations obtained from your experiments with Sage. 


1. Which elements have complements and which do not, and why? 
2. Read the documentation of the .antichains() method to learn what an antichain is. How many antichains are there? 
3. Is the lattice distributive? 


Use Posets.BooleanLattice(4)_ to construct an instance of the prototypical Boolean algebra on 16 elements (i.e., all 
subsets of a 4-set). 


Then use Posets.IntegerCompositions(5) to construct the poset whose 16 elements are the compositions of the 
integer 5. We have seen above that the integer composition lattice is distributive and complemented, making it a Boolean 
algebra. And by Theorem 19.23 we can conclude that these two Boolean algebras are isomorphic. 


Use the .plot() method to see the similarity visually. Then use the method .hasse_diagram() on each poset to 
obtain a directed graph (which you can also plot, though the embedding into the plane may not be as informative). Employ the 
graph method .is_isomorphic() to see that the two Hasse diagrams really are the “same.” 


(Advanced) For the previous question, construct an explicit isomorphism between the two Boolean algebras. This would be a 
bijective function (constructed with the def command) that converts compositions into sets (or if, you choose, sets into 
compositions) and which respects the meet and join operations. You can test and illustrate your function by its interaction with 
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specific elements evaluated in the meet and join operations, as described in the definition of an isomorphism of Boolean 
algebras. 
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CHAPTER OVERVIEW 


20: Vector Spaces 


In a physical system a quantity can often be described with a single number. For example, we need to know only a single number to 
describe temperature, mass, or volume. However, for some quantities, such as location, we need several numbers. To give the 
location of a point in space, we need x, y, and z coordinates. Temperature distribution over a solid object requires four numbers: 
three to identify each point within the object and a fourth to describe the temperature at that point. Often n-tuples of numbers, or 
vectors, also have certain algebraic properties, such as addition or scalar multiplication. 


20.1: Definitions and Examples 

20.2: Subspaces 

20.3: Linear Independence 

20.4: Reading Questions 

20.5: Exercises 

20.6: References and Suggested Readings 
20.7: Sage 

20.8: Sage Exercises 
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20.1: Definitions and Examples 


A vector space V over a field F is an abelian group with a scalar product a-v or av defined for all a € F and all ve V 
satisfying the following axioms. 

* a(Bv) = (af); 

« (a+ f)v=av+ Bu; 

¢ a(u+v) =au+au; 

e lv=v; 


where a, 8 € Fandu,veV. 


The elements of V are called vectors; the elements of F' are called scalars. It is important to notice that in most cases two vectors 
cannot be multiplied. In general, it is only possible to multiply a vector with a scalar. To differentiate between the scalar zero and 
the vector zero, we will write them as 0 and 0, respectively. 


Let us examine several examples of vector spaces. Some of them will be quite familiar; others will seem less so. 


Example 20.1 
The n-tuples of real numbers, denoted by R”, form a vector space over R. Given vectors u=(t,...,Un) and 
v= (v1,-.-,Un) in R” and a in R, we can define 
Solution 
vector addition by 
utv=(u1,.-.,Un)+(u1,---,Un) = (U1 +01,---,Un Un) 


and scalar multiplication by 


au=a(u,...,Un) =(au1,..., Un). 


Example 20.2 


If F is a field, then F'[z] is a vector space over F’. The vectors in F'[a] are simply polynomials, and vector addition is just 
polynomial addition. If a € F and p(x) € F'[a], then scalar multiplication is defined by 


Solution 


ap(x). 


Example 20.3 


The set of all continuous real-valued functions on a closed interval [a,b] is a vector space over R. If f(x) and g(x) are 
continuous on [a, b], then 


Solution 


(f +9)(x) is defined to be f(z) +(x). Scalar multiplication is defined by (a f)(x) =af(x) for a € R. For example, if 
f(x) =sinz and g(x) = x, then (2f +5g)(x) =2sinz +52’. 


Example 20.4 


Let V = Q(V2) = {a +bV2: a,b € Q}. Then V isa vector space over Q. If u=a+byV2 andv=c+dy2, then 


Solution 


u+v=(a+c)+(b+d)/2_ is again in V. Also, for a € Q, avis in V. We will leave it as an exercise to verify that all of 
the vector space axioms hold for V. 
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Proposition 20.5 


Let V be a vector space over F’. Then each of the following statements is true. 


1.0v=0 forallve V. 
2.a0=0 forallac F. 
3. If av =0, then either a =0 orv=0. 
4, (—1)v=—v foralluveV. 
5. —(av) = (—a)v=a(—v) foralla € F andallveV. 
Proof 
To prove (1), observe that 
Ov = (0+0)v = 0v+ 00; 
consequently, 0+0v=0v+0v. Since V is an abelian group, 0 = Ov. 


The proof of (2) is almost identical to the proof of (1). For (3), we are done if a = 0. Suppose that a £0. Multiplying both 
sides of av = 0 by 1/a,we have v= 0. 


To show (4), observe that 
v+(—1)v=1v+ (-1)v= (1—1)v=0v=0, 


and so —v = (—1)v. We will leave the proof of (5) as an exercise. 
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20.2: Subspaces 


Just as groups have subgroups and rings have subrings, vector spaces also have substructures. Let V be a vector space over a field 
F, and W a subset of V. Then W is a subspace of V if it is closed under vector addition and scalar multiplication; that is, if 
u,v € W anda € F, it will always be the case that u+v and av are also in W. 


Example 20.6 


Let W be the subspace of IR? defined by W = {(a1, 271 +22,21 —2%2): 21,22 € R}. We claim that W is a subspace of R?. 
Since 


Solution 


a(x, 221 +22,2%1—22) = (az, a(221 +22), a(21 — 22)) 
= (az, 2(ax1) +ax2,a21 —az2), 


W is closed under scalar multiplication. To show that W is closed under vector addition, let uw = (21, 221 + 22,21 —Z2) and 
v= (y1,2y1 + y2, y1 — y2) be vectors in W. Then 


utvu=(a1+y1, 2(a1 +41) + (x2 +y2), (21 + y1) — (42 +y2)). 


Example 20.7 


Let W be the subset of polynomials of F'[z] with no odd-power terms. If p(a) and g(x) have no odd-power terms, then 
Solution 


neither will p(x) +q(x). Also, ap(x) € W fora € F and p(x) € W. 


Let V be any vector space over a field F' and suppose that v1, v2,..., Up are vectors in V and a1, Q2,...,Qp, are scalars in F. 
Any vector w in V of the form 


n 
w= y Oj Vz = 4Vy +.AQV2Q +++++AnVUn 


i=l 
is called a linear combination of the vectors v1, v2,...,Un- The spanning set of vectors v1,V2,...,Un is the set of vectors 
obtained from all possible linear combinations of v1, v2,...,Un-If W is the spanning set of v1, v2,..., Un, then we say that W is 
spanned by v1, V2,...,Un- 
Proposition 20.8 
Let S = {v1, v2,..., Un} be vectors in a vector space V. Then the span of S is a subspace of V. 


Proof 


Let wu and v be in S. We can write both of these vectors as linear combinations of the v's: 


U =U, + A2V2 +:+++QnVUn 
uv = Biv, + Bove +-+++Bndn. 


Then 
Uu+u= (a1 + B1)v1 + (a2 + Bo )v2 +++ + (An +Bn)Un 
is a linear combination of the v;'s. Fora € F, 


au = (aa1)v; + (aaz)v2 +++ + (aan)Un 


is in the span of S. 
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20.3: Linear Independence 


Let S = {v1, v2,...,Un} be a set of vectors in a vector space V. If there exist scalars a1, @2...Qn, € F such that not all of the 


qa, 's are zero and 
101 +0202 +++ +QnUn = 0, 


then S' is said to be linearly dependent. If the set S is not linearly dependent, then it is said to be linearly independent. More 
specifically, S is a linearly independent set if 


1101 + A202 +++: +AnUn =0 


implies that 
Q, = a2 =::: =a, =0 
for any set of scalars {a1, @2...Qn}. 
Proposition 20.9 
Let {v1, v2,...,Un} be a set of linearly independent vectors in a vector space. Suppose that 


VU = 1 V1 +. A902 +++++0nUn = Bi V1 + Bove +:-++ Brun. 


Then ay = Bi, a2 = Bo,..-, Qn = Bn. 


Proof 
If 
VU = A101 +0902 +:+++QnUn = 8101 + Bov2 +--+ + Brn, 
then 
(a4 — B1)v1 + (a2 — B2)v2 +--+ + (Qn — Bn)vn = 0. 
Since v1,..., Un are linearly independent, a; —8; =O fori =1,...,n. 


The definition of linear dependence makes more sense if we consider the following proposition. 


Proposition 20.10 


A set {v1,U2,..., Un} of vectors in a vector space V is linearly dependent if and only if one of the v;'s is a linear combination 
of the rest. 
Proof 

Suppose that {v1, v2,..., Un }isa set of linearly dependent vectors. Then there exist scalars @1,...,@,, such that 


QV, + Q2V2 +::-+QAnUn = 0, 


with at least one of the a;'s not equal to zero. Suppose that a, 4 0. Then 


Oh = —— hh — se 
Ak Ak Ak Ak 


Conversely, suppose that 
Up = Biv. +++ + Be-1UR-a + Bepiveq +:°++ Brn. 
Then 
By ++ ++ + Be-1UR-1 — Ue + BeyVer +:°* + Btn = 0. 
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The following proposition is a consequence of the fact that any system of homogeneous linear equations with more unknowns than 
equations will have a nontrivial solution. We leave the details of the proof for the end-of-chapter exercises. 


Proposition 20.11 


Suppose that a vector space V is spanned by n vectors. If m >n, then any set of m vectors in V must be linearly dependent 


A set {€1, €2,.-., €n} of vectors in a vector space V is called a basis for V if {e1,€2,...,€n} is a linearly independent set that 
spans V. 


Example 20.12 


The vectors e; =(1,0,0), e2 =(0,1,0), and es =(0,0,1) form a basis for R*. The set certainly spans R°, since any 
arbitrary vector (#1, %2, £3) in R? can be written as 21e; + 22€) +2363. 


Solution 


Also, none of the vectors e;,é2,e3 can be written as a linear combination of the other two; hence, they are linearly 
independent. The vectors €1, €2, €3 are not the only basis of IR: the set {(3, 2, 1), (3, 2, 0), (1, 1, 1) }is also a basis for R*. 


Example 20.13 


Let Q(V/2) = {a+ bV2:a,b€ Q}. The sets 


Solution 


{1,/2 }and {1+ V2, 1—/2} are both bases of Q(v2). 


From the last two examples it should be clear that a given vector space has several bases. In fact, there are an infinite number of 
bases for both of these examples. In general, there is no unique basis for a vector space. However, every basis of R® consists of 
exactly three vectors, and every basis of Q(v2) consists of exactly two vectors. This is a consequence of the next proposition. 


Proposition 20.14 


Let {e1, €2,...,em}and { fi, fo,..-, fn} be two bases for a vector space V. Thenm =n. 
Proof 
Since {e1, €2,..., €m}is a basis, it is a linearly independent set. By Proposition 20.11, n <_m. Similarly, { fi, fo,---, fn} 


is a linearly independent set, and the last proposition implies that m <n. Consequently, m =n. 


If {e1, €2,.-., €n} is a basis for a vector space V, then we say that the dimension of V is n and we write dimV =n. We will 
leave the proof of the following theorem as an exercise. 


Theorem 20.15 


Let V be a vector space of dimension n. 


1. If S = {v1,..., Un} is a set of linearly independent vectors for V, then S is a basis for V. 
2. If S = {v1,..., Un} spans V, then S is a basis for V. 
3. If S = {v1,..., Ux} is a set of linearly independent vectors for V with k <n, then there exist vectors Up41,---, Un such 
that 
{u1,. ++ Uk, Uk41)-+> Un} 


is a basis for V. 
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20.4: Reading Questions 


Why do the axioms of a vector space appear to only have four conditions, rather than the ten you may have seen the first time 
you saw an axiomatic definition? 


The set V = Q(1/11) = {a + },/11| a,b € Q} is a vector space. Carefully define the operations on this set that will make 
this possible. Describe the subspace spanned by S = {u}, where u = 3 + 2V lleV. 


| Write a long paragraph, or a short essay, on the importance of linear independence in linear algebra. 


| Write a long paragraph, or a short essay, on the importance of spanning sets in linear algebra. 


| “Linear algebra is all about linear combinations.” Explain why you might say this. 


This page titled 20.4: Reading Questions is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or 
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20.5: Exercises 


If F is a field, show that F'[a] is a vector space over F’, where the vectors in F'|a] are polynomials. Vector addition is 
polynomial addition, and scalar multiplication is defined by ap(z) for a € F. 


Prove that Q(/2 ) is a vector space. 


a 


Let Q(1/2, \/3 ) be the field generated by elements of the form a + b\/2+c/3+d,/6, where a, b,c, d are in Q. Prove that 
Q(/2, V3) is a vector space of dimension 4 over Q. Find a basis for Q(./2, /3 ). 


Prove that the complex numbers are a vector space of dimension 2 over R. 


Prove that the set P,, of all polynomials of degree less than n form a subspace of the vector space F'[z]. Find a basis for P,, 
and compute the dimension of P,,. 


c 
E 


Let F' be a field and denote the set of n-tuples of F’ by F'”. Given vectors u = (t1,...,Un) and v=(v1,..., Un) in F” and 
a in F, define vector addition by 


utv=(u,.-.,Un)+(v1,---;Un) = (ui +01,.--,Un +Un) 
and scalar multiplication by 
au=a(u,...,Un) =(au1,..., Un). 


Prove that F’” is a vector space of dimension n under these operations. 


Which of the following sets are subspaces of IR3? If the set is indeed a subspace, find a basis for the subspace and compute its 
dimension. 


1. {(x1, £2, £3) 321 — 24%. +23 = 0} 


2. {(@1, £2, £3) : 341 +403 =0, 2x1 — 22 +23 =0} 
3. {(@1, £2, £3) : 4] — 2x2 +223 = 2} 
4, {(x1, 22, #3) : 3a, — 222 =0} 


Show that the set of all possible solutions (a, y, z) € IR? of the equations 


Az +By+Cz =0 
Dz+Ey+Cz =0 


form a subspace of R’. 
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Let W be the subset of continuous functions on [0, 1] such that f(0) = 0. Prove that W is a subspace of C(O, 1]. 


Let V be a vector space over FE’. Prove that —(av) = (—a)v=a(—v) foralla € F andallueV. 


Let V be a vector space of dimension n. Prove each of the following statements. 


1. If S= {v1,...,Un} isa set of linearly independent vectors for V, then S is a basis for V. 
2. If S = {v1,...,Un} spans V, then S isa basis for V. 
3. If S = {v1,...,v,} is a set of linearly independent vectors for V with k < n, then there exist vectors vz41,-.-,Un such 
that 
NOijos onlay Oi uuigan otal 


is a basis for V. 


Prove that any set of vectors containing 0 is linearly dependent. 


Let V be a vector space. Show that {0} is a subspace of V of dimension zero. 


If a vector space V is spanned by n vectors, show that any set of m vectors in V must be linearly dependent for m > n. 


Linear Transformations 


Let V and W be vector spaces over a field F’, of dimensions m and n, respectively. If T': V — W isa map satisfying 


T(u+v) =T(u)+T(v) 
T(av) =aT(v) 


for all a € F and all u,v € V, then T is called a linear transformation from V into W. 


1. Prove that the kernel of T, ker(T’) = {vu ¢ V: T(v) =O}, is asubspace of V. The kernel of T is sometimes called the 
null space of T. 

2. Prove that the range or range space of T, R(V) ={w © W: T(v) = w for some v € V}, isa subspace of W. 

3. Show that T’': V > W is injective if and only if ker(Z') = {0}. 

4. Let {v1,..., vx} be a basis for the null space of T’. We can extend this basis to be a basis {v1,..., Uk, Uki1,---,Um}of V. 
Why? Prove that {T'(vz41),.-., T'(Um)} is a basis for the range of T’. Conclude that the range of T has dimension m — k. 

5. Let dim V = dim W. Show that a linear transformation T : V — W is injective if and only if it is surjective. 


Let V and W be finite dimensional vector spaces of dimension n over a field F’. Suppose that T : V — W is a vector space 
isomorphism. If {v1,..., Un} is a basis of V, show that {T'(v1),..., T(vn)} is a basis of W. Conclude that any vector space 
over a field F of dimension n is isomorphic to fF”. 
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Let U and V be subspaces of a vector space W. The sum of U and V, denoted U + V, is defined to be the set of all vectors of 
the form u+v, where u € U andve V. 


1. Prove that U+V and UV are subspaces of W. 

2.1fU+V=W andUnMV =0, then W is said to be the direct sum. In this case, we write W =U @V. Show that every 
element w € W can be written uniquely as w = u-+v, whereu €U andvc V. 

3. Let U be a subspace of dimension & of a vector space W of dimension n. Prove that there exists a subspace V of 
dimension n —k such thatW =U @V. Is the subspace V unique? 

4. If U and V are arbitrary subspaces of a vector space W, show that 


dim(U +V) =dimU + dim V —dim(UNV). 


Let V and W be finite dimensional vector spaces over a field F’. 


1. Show that the set of all linear transformations from V into W, denoted by \Hom(V, W), is a vector space over F’, where 
we define vector addition as follows: 


where S,T € \Hom(V,W),a€ F, andve V. 
2. Let V be an F-vector space. Define the dual space of V to be V* = \Hom(V, F’). Elements in the dual space of V are 


called linear functionals. Let v1, ..., Vv, be an ordered basis for V. If v= ayv, +---+Q,Un_ is any vector in V, define a 
linear functional ¢; : V + F' by ¢;(v) =a,;. Show that the ¢;'s form a basis for V *. This basis is called the dual basis of 
V1,-++, Un (or simply the dual basis if the context makes the meaning clear). 


3. Consider the basis {(3, 1), (2, -2)}for IR?. What is the dual basis for (IR?)*? 
4. Let V be a vector space of dimension n over a field F' and let V** be the dual space of V *. Show that each element v € V 
gives rise to an element X, in V ** and that the map v+> A, is an isomorphism of V with V**. 
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20.7: Sage 


Many computations, in seemingly very different areas of mathematics, can be translated into questions about linear combinations, 
or other areas of linear algebra. So Sage has extensive and thorough support for topics such as vector spaces. 


Vector Spaces 


The simplest way to create a vector space is to begin with a field and use an exponent to indicate the number of entries in the 
vectors of the space. 


Elements can be built with the vector constructor. 


Notice that vectors are printed with parentheses, which helps distinguish them from lists (though they alos look like tuples). Vectors 
print horizontally, but in Sage there is no such thing as a “row vector” or a “column vector,” though once matrices get involved we 
need to address this distinction. Finally, notice how the elements of the finite field have been converted to an alternate 
representation. 


Once we have vector spaces full of vectors, we can perform computations with them. Ultimately, all the action in a vector space 
comes back to vector addition and scalar multiplication, which together create linear combinations. 


Subspaces 


Sage can create subspaces in a variety of ways, such as in the creation of row or column spaces of matrices. However, the most 
direct way is to begin with a set of vectors to use as a spanning set. 


Notice that the information printed about S_ includes a “basis matrix.” The rows of this matrix are a basis for the vector space. We 
can get the basis, as a list of vectors (not rows of a matrix), withthe .basis() method. 


Notice that Sage has converted the spanning set of three vectors into a basis with two vectors. This is partially due to the fact that 
the original set of three vectors is linearly dependent, but a more substantial change has occurred. 


This is a good place to discuss some of the mathematics behind what makes Sage work. A vector space over an infinite field, like 
the rationals or the reals, is an infinite set. No matter how expansive computer memory may seem, it is still finite. How does Sage 
fit an infinite set into our finite machines? The main idea is that a finite-dimensional vector space has a finite set of generators, 
which we know as a basis. So Sage really only needs the elements of a basis (two vectors in the previous example) to be able to 
work with the infinitely many possibilities for elements of the subspace. 


Furthermore, for every basis associated with a vector space, Sage performs linear combinations to convert the given basis into 
another “standard” basis. This new basis has the property that as the rows of a matrix, the matrix is in reduced row-echelon form. 
You can see this in the basis matrix above. The reduced row-echelon form of a matrix is unique, so this standard basis allows Sage 
to recognize when two vector spaces are equal. Here is an example. 


As you might expect, it is easy to determine the dimension of a vector space. 


Linear Independence 


There are a variety of ways in Sage to determine if a set of vectors is linearly independent or not, and to find relations of linear 
dependence if they exist. The technique we will show here is a simple test to see if a set of vectors is linearly independent or not. 
Simply use the vectors as a spanning set for a subspace, and check the dimension of the subspace. The dimension equals the 
number of vectors in the spanning set if and only if the spanning set is linearly independent. 


So the first set of vectors, [U, Vv, W|] , is linearly independent, while the secondset, [uU, v, aM3*u + adii*v] ,isnot. 


Abstract Vector Spaces 


Sage does not implement many abstract vector spaces directly, such as P,,, the vector space of polynomials of degree 7n or less. 
This is due in part to the fact that a finite-dimensional vector space over a field F' is isomorphic to the vector space F’'”. So Sage 
captures all the functionality of finite-dimensional vector spaces, and it is left to the user to perform the conversions according to 
the isomorphism (which is often trivial with the choice of an obvious basis). 


However, there are instances where rings behave naturally as vector spaces and we can exploit this extra structure. We will see 
much more of this in the chapters on fields and Galois theory. As an example, finite fields have a single generator, and the first few 
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powers of the generator form a basis. Consider creating a vector space from the elements of a finite field of order 7° = 117 649. As 
elements of a field we know they can be added, so we will define this to be the addition in our vector space. For any element of the 
integers mod 7, we can multiply an element of the field by the integer, so we define this to be our scalar multiplication. Later, we 
will be certain that these two definitions lead to a vector space, but take that for granted now. So here are some operations in our 
new vector space. 


You might recognize that this looks very familiar to how we add polynomials, and multiply polynomials by scalars. You would be 
correct. However, notice that in this vector space construction, we are totally ignoring the possibility of multiplying two field 
elements together. As a vector space with scalars from Z7, a basis is the first six powers of the generator, {1, a, ia, at. 
(Notice how counting from zero is natural here.) You may have noticed how Sage consistently rewrites elements of fields as linear 
combinations — now you have a good explanation. 


Here is what Sage knows about a finite field as a vector space. First, it knows that the finite field is a vector space, and what the 
field of scalars is. We suppress additional output with isomorphisms between the finite field structure and the vector space 
structure. 


So the finite field (as a vector space) is isomorphic to the vector space (Z7)°. Notice this is not a ring or field isomorphism, as it 
does not fully address multiplication of elements, even though that is possible in the field. 


Second, elements of the field can be converted to elements of the vector space easily. 


Notice that Sage writes field elements with high powers of the generator first, while the basis in use is ordered with low powers 
first. The computations below illustrate the isomorphism preserving the structure between the finite field itself and its interpretation 
as a vector space, (Z7)®. 


Linear Algebra 


Sage has extensive support for linear algebra, well beyond what we have described here, or what we will need for the remaining 
chapters. Create vector spaces and vectors (with different fields of scalars), and then use tab-completion on these objects to explore 
the large sets of available commands. 


This page titled 20.7: Sage is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or curated by Thomas 
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20.8: Sage Exercises 


Given two subspaces U and W of a vector space V, their sum U+W _ can be defined as the set 
U+W ={u+w|ue€U, we WS}, in other words, the set of all possible sums of an element from U and an element from 
W. 


Notice this is not the direct sum of your text, nor the direct sum() method in Sage. However, you can build this 

subspace in Sage as follows. Grab the bases of U and W individually, as lists of vectors. Join the two lists together by just 

using a plus sign between them. Now build the sum subspace by creating a subspace of V spanned by this set, by using the 
.Subspace() method. 


In the vector space ( QQ10 ) construct two subspaces that you expect to (a) have dimension 5 or 6 or so, and (b) have an 
intersection that is a vector space of dimension 2 or so. Compare their individual dimensions with the dimensions of the 
intersectionof U andW(UNW, .intersection() in Sage) andthe sumU+W. 


Repeat the experiment with the two original vector spaces having dimension 8 or so, and with the intersection as small as 
possible. Form a general conjecture relating these four dimensions based on the results of your two (or more)experiments. 


We can construct a field in Sage that extends the rationals by adding in a fourth root of two, Qlv2I, with the command 
F.<c> = QQ[24(1/4)] . This is a vector space of dimension 4 over the rationals, with a basis that is the first four 
powers of c = V2 (starting with the zero power). 


The command F.vector_space() will retum three items in a triple (so be careful how you handle this output to extract 
what you need). The first part of the output is a vector space over the rationals that is isomorphic to F . The next is a vector 
space isomorphism (invertible linear transformation) from the provided vector space to the field, while the third is an 
isomorphism in the opposite direction. These two isomorphisms can then be used like functions. Notice that this is different 
behavior than for .vector_space() applied to finite fields. Create non-trivial examples that show that these vector 
space isomorphisms behave as an isomorphism should. (You will have at least four such examples in a complete solution.) 


Build a finite field F’ of order p” in the usual way. Then construct the (multiplicative) group of all invertible (nonsingular) 
m Xm matrices over this field with the command G = GL(m, F) (“the general linear group”). What is the order of this 
group? In other words, find a general expression for the order of this group. 


Your answer should be a function of m, p and n. Provide a complete explanation of the logic behind your solution (i.e. 
something resembling a proof). Also provide tests in Sage that your answer is correct. 


Hints: G.order() will help you test and verify your hypotheses. Small examples in Sage (listing all the elements of the 
group) might aid your intuition—which is why this is a Sage exercise. Small means 2 x 2 and 3 x 3 matrices and finite fields 
with 2, 3,4, 5elements, at most. Results do not really depend on each of p and n, but rather just on p”. 


Realize this group is interesting because it contains representations of all the invertible (i.e. 1-1 and onto) linear 
transformations from the (finite) vector space F’” to itself. 


What happens if we try to do linear algebra over a ring that is not also a field? The object that resembles a vector space, but 
with this one distinction, is known as a module. You can build one easily with a construction like ZZ/3 . Evaluate the 
following to create a module and a submodule. 


Examine the bases and dimensions (aka “rank”) of the module and submodule, and check the equality of the module and 
submodule. How is this different than the situation for vector spaces? Can you create a third module, P , that is a proper 
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| subset of ™ and properly contains N ? 


A finite field, F, of order 5° is a vector space of dimension 3 over Zs. Suppose a is a generator of F'. Let M be any 3 x3 
matrix with entries from Zs (carefule here, the elements are from th field of scalars, not from the vector space). If we convert 
an element z € F' to a vector (relative to the basis {1, a, a? }), then we can multiply it by M4 (with M on the left) to create 
another vector, which we can translate to a linear combination of the basis elements, and hence another element of F’. This 
function is a vector space homomorphism, better known as a linear transformation (implemented with a matrix representation 
relative to the basis {1, a, a? }. Notice that each part below becomes less general and more specific. 


1. Create a non-invertible matrix R and give examples to show that the mapping described by R is a vector space 
homomorphism of F' into F. 

2. Create an invertible matrix M. The mapping will now be an invertible homomorphism. Determine the inverse function and 
give examples to verify its properties. 

3. Since a is a generator of the field, the mapping a +> a® can be extended to a vector space homomorphism (i.e. a linear 
transformation). Find a matrix M which effects this linear transformation, and from this, determine that the homomorphism 
is invertible. 

4. None of the previous three parts applies to properties of multiplication in the field. However, the mapping from the third 
part also preserves multiplication in the field, though a proof of this may not be obvious right now. So we are saying this 
mapping is a field automorphism, preserving both addition and multiplication. Give a nontrivial example of the 
multiplication-preserving properties of this mapping. (This is the Frobenius map which will be discussed further in 
Chapter 21.) 


This page titled 20.8: Sage Exercises is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or curated 
by Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the LibreTexts 
platform; a detailed edit history is available upon request. 


GNU Free Documentation License 20.8.2 https ://math.libretexts.org/@go/page/81206 


Oibretexts: 
CHAPTER OVERVIEW 


21: Fields 


It is natural to ask whether or not some field F’ is contained in a larger field. We think of the rational numbers, which reside inside 
the real numbers, while in turn, the real numbers live inside the complex numbers. We can also study the fields between Q and R 
and inquire as to the nature of these fields. 


More specifically if we are given a field F' and a polynomial p(x) € F[a], we can ask whether or not we can find a field E 
containing F’ such that p(x) factors into linear factors over Ez]. For example, if we consider the polynomial 


p(x) =a* 52? +6 


in Q[z], then p(x) factors as (x? — 2)(x* —3). However, both of these factors are irreducible in Q[z]. If we wish to find a zero of 
p(x), we must go to a larger field. Certainly the field of real numbers will work, since 


p(x) = (x — V2)(a + /2)(« — /3)(x + V3). 
It is possible to find a smaller field in which p(z) has a zero, namely 
Q(v2) = {a+b /2: a,b € Q}. 


We wish to be able to compute and study such fields for arbitrary polynomials over a field F’. 


21.1: Extension Fields 

21.2: Splitting Fields 

21.3: Geometric Constructions 

21.4: Reading Questions 

21.5: Exercises 

21.6: References and Suggested Readings 
21.7: Sage 

21.8: Sage Exercise 
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21.1: Extension Fields 
A field E is an extension field of a field F' if F is a subfield of &. The field F’ is called the base field. We write F' C E. 


For example, let 


F=Q(y2) ={a+by2:a,b€Q} 
and let F = Q(./2+/3) be the smallest field containing both Q and \/2 +.4/3. Both E and F are extension fields of the 
rational numbers. We claim that 


Solution 


E is an extension field of F. To see this, we need only show that /2 is in E. Since /2+,/3 is in E, 
1/(/2+/3) =/3—/2 must also be in E. Taking linear combinations of /2 + \/3 and 1/3 — \/2, we find that \/2 and 
4/3 must both be in E. 


Let p(x) =a? +2+1 € Zs[z]. Since neither 0 nor 1 is a root of this polynomial, we know that p(z) is irreducible over Zo. 
We will construct a field extension of Z2 containing an element @ such that p(a) =0. By Theorem 17.22, the ideal (p(«)) 
generated by p(a) is maximal; hence, Z2|x]/(p(«))is a field. Let f(a) + (p(x)) be an arbitrary element of Z2[z]/(p(x)). By 
the division algorithm, 


f(x) = (2? +2 41)q(z) + r(x), 
where the degree of r(z) is less than the degree of x? +2 +1. Therefore, 
Solution 
f(a) +(e? +@+1) =r(2) + (2? +2 +1). 


The only possibilities for r(x) are then 0, 1, x, and 1+«. Consequently, E = Zs[a]/(z?+2+1) is a field with four 
elements and must be a field extension of Z2, containing a zero a of p(x). The field Zz (a) consists of elements 


0+0a =0 
14+0a =1 
0+la=a 
1l+la =1+a. 


Notice that a? +a +1 =0; hence, if we compute (1+a)?, 
(1+a)(l+a)=1+a+a+(a)? =a. 


Other calculations are accomplished in a similar manner. We summarize these computations in the following tables, which tell 
us how to add and multiply elements in EF. 


Figure 21.3.Addition Table for Z2(a) 
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Figure 21.4. Multiplication Table for Z2(a) 


The following theorem, due to Kronecker, is so important and so basic to our understanding of fields that it is often known as the 
Fundamental Theorem of Field Theory. 


Let F be a field and let p(x) be a nonconstant polynomial in F'|x]. Then there exists an extension field E of F and an element 
a € E such that p(a) =0. 


Proof 


To prove this theorem, we will employ the method that we used to construct Example 21.2 Clearly, we can assume that 
p(a) is an irreducible polynomial. We wish to find an extension field of F’ containing an element a such that p(a) =0. 
The ideal (p(ax)) generated by p(x) is a maximal ideal in F[x] by Theorem 17.22 hence, F'[x]/(p(a)) is a field. We 
claim that # = F'[x|/(p(x)) is the desired field. 


We first show that & is a field extension of F’. We can define a homomorphism of commutative rings by the map 
wp: F > Fla2|/(p(x)), where o(a) =a+(p(z)) fora € F. It is easy to check that 7 is indeed a ring homomorphism. 
Observe that 

Pla) + ¥(6) = (a+ (p(z))) + (6+ (p(z))) = (a+b) + (p(x) = Ya +8) 


and 


(a)~(0) = (a+ (p(z)))(6 + (p(z))) = ab + (p(x) = (ab). 


To prove that 7 is one-to-one, assume that 


a+ (p(x)) =$(a) = p(b) =b + (p(z)). 


Then a—b is a multiple of p(x), since it lives in the ideal (p(x)). Since p(x) is a nonconstant polynomial, the only 
possibility is that a—b=0O. Consequently, a= b and w is injective. Since w is one-to-one, we can identify F' with the 
subfield {a+ (p(x)):a¢€ F} of E and view E as an extension field of F’. 


It remains for us to prove that p(x) has a zero aC HEH. Set a=ax+(p(x)). Then @ is in EF. If 
p(x) =a9+a;a+---+anz", then 
pla) =a9 +a1(z + (p(x))) +--+ +an(z + (p(z)))” 
= aq + (aya + (p(@))) +--+ + (ana + (p())) 
=@) Git +--+ 0,2 4 (pit) 


=0+ (p(z)). 


Therefore, we have found an element a € EF = F[x]/(p(x)) such that a is a zero of p(x). 


Example 21.6. 


Let p(x) =a2° +24+1 € Z»[2]. Then p(a) has irreducible factors 


Solution 


z?+2x+4+1 and 2?+2+1. Fora field extension E of Zz such that p(x) has a root in E, we can let E be either 
Z|x]/(x? +2 +1) or Za[z]/(z3 +2 +1). We will leave it as an exercise to show that Z2[z]/(xz3 +z +1) isa field with 
2° —8 elements. 
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Algebraic Elements 


An element @ in an extension field & over F' is algebraic over F' if f(a) =0 for some nonzero polynomial f(x) € F[a]. An 
element in F that is not algebraic over F' is transcendental over F’. An extension field F of a field F' is an algebraic extension of 
F if every element in F is algebraic over F’. If F is a field extension of F' and a1,...,Q@, are contained in FH, we denote the 
smallest field containing F' and a,,...,@, by F'(a,,...,@,).If HE = F(a) for some a € E, then F is a simple extension of F’. 


Both ,/2 and i are algebraic over Q since they are zeros of the polynomials «” —2 and x” +1, respectively. Clearly 7 and e 
are algebraic over the real numbers; however, 


Solution 


it is a nontrivial fact that they are transcendental over Q. Numbers in R that are algebraic over Q are in fact quite rare. Almost 
all real numbers are transcendental over Q.’(In many cases we do not know whether or not a particular number is 
transcendental; for example, it is still not known whether a + e is transcendental or algebraic.) 

The probability that a real number chosen at random from the interval [0, 1] will be transcendental over the rational numbers is 


one. 


A complex number that is algebraic over Q is an algebraic number. A transcendental number is an element of C that is 
transcendental over Q. 


Example 21.8. 


We will show that ./2 + /3 is algebraic over Q. Ifa = \/2+ /3, then 

Solution 

a? =2+4/3. Hence, a? -2= V3 and (a? — 2)? =3. Since a4 —4a*+1=0, it must be true that a is a zero of the 
polynomial z4 — 4x? +1 € Q[z]. 


It is very easy to give an example of an extension field & over a field Ff’, where & contains an element transcendental over F’. The 
following theorem characterizes transcendental extensions. 


Theorem 21.9. 


Let E be an extension field of F and a € E. Then a is transcendental over F if and only if F'(a) is isomorphic to F(x), the 
field of fractions of F' |x]. 


Proof 


Let da: F'[|z] > E be the evaluation homomorphism for a. Then a is transcendental over F' if and only if 
¢a(p(x)) =p(a) £0 for all nonconstant polynomials p(x) € F'|a]. This is true if and only if ker dy = {0}; that is, it is 
true exactly when ¢, is one-to-one. Hence, — must contain a copy of F'[a]. The smallest field containing F'[z] is the field 
of fractions F(x). By Theorem 18.4 E£ must contain a copy of this field. 


We have a more interesting situation in the case of algebraic extensions. 


Theorem 21.10. 


Let E be an extension field of a field F and a € E with a algebraic over F'. Then there is a unique irreducible monic 
polynomial p(x) € F'[z]| of smallest degree such that p(a) =0. If f(a) is another polynomial in F'[x] such that f(a) =0, 
then p(a) divides f(x). 


Proof 


Let ¢. : F[x]—> E be the evaluation homomorphism. The kernel of ¢y is a principal ideal generated by some 
p(x) € F |x] with deg p(x) > 1. We know that such a polynomial exists, since F'[z] is a principal ideal domain and @ is 
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algebraic. The ideal (p(x)) consists exactly of those elements of F'[x] having a as a zero. If f(a) =0 and f(z) is not the 
zero polynomial, then f(x) € (p(x)) and p(a) divides f(z). So p(x) is a polynomial of minimal degree having a as a 
zero. Any other polynomial of the same degree having a as a zero must have the form Gp(x) for some 6 € F’. 

Suppose now that p(x) =r(x)s(x) is a factorization of p(x) into polynomials of lower degree. Since p(a) =0, 
r(a)s(a) =0; consequently, either r(a)=0 or s(a)=0, which contradicts the fact that p is of minimal degree. 
Therefore, p(x) must be irreducible. 


Let £ be an extension field of F anda € E be algebraic over F’. The unique monic polynomial p(z) of the last theorem is called 
the minimal polynomial for a over F’. The degree of p(x) is the degree of a over F’. 


Example 21.11. 


Let f(z) =a? —2 and g(x) = 24 — 427 +1. 
Solution 


These polynomials are the minimal polynomials of ./2 and ,/2 + ./3, respectively. 


Proposition 21.12. 


Let E be a field extension of F and a € E be algebraic over F'. Then F(a) = F[x]/(p(x)), where p(x) is the minimal 
polynomial of a over F. 


Proof 
Let ¢. : F[x] — E be the evaluation homomorphism. The kernel of this map is (p(a)), where p(x) is the minimal 
polynomial of a. By the First Isomorphism Theorem for rings, the image of ¢. in E is isomorphic to F(a) since it 
contains both F' and a. 


Theorem 21.13. 


Let E = F(a) bea simple extension of F’, where a € E is algebraic over F’. Suppose that the degree of a over F' is n. Then 
every element 8 € E can be expressed uniquely in the form 


B=bo+bia+- sedi, nei 
for b; € F. 


Proof 


Since ¢q(F[a]) = F(a), every element in H=F(a) must be of the form ¢o(f(x))=f(a), where f(a) is a 
polynomial in a with coefficients in F’. Let 


p(t) =2" +an12" 1 +--+ +49 


be the minimal polynomial of a. Then p(a) = 0; hence, 


=i 
a” = —An1a” ~ —-+-— ap. 


Similarly, 


ant —=aa” 
n n-1 
=—Gn_1Q —An_2@ ~~ — +++ — ana 
il 


et Se —9) — Gn." — +++ —aga. 


= —An-1 (—@n_1a 


Continuing in this manner, we can express every monomial a”, m >n, as a linear combination of powers of a that are 
less than n. Hence, any 6 € F(a) can be written as 


B=b)+ba+-:- OTs ape 
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To show uniqueness, suppose that 
B= tha+---+b,10" | =a +cqa+---+e,10"7 
for b; and c; in F’. Then 
g(x) = (bo —co) + (b1 — 1) a +++ + (Bp — Cn) 2” 


is in Fax] and g(a) =0. Since the degree of g(a) is less than the degree of p(x), the irreducible polynomial of a, g(x) 
must be the zero polynomial. Consequently, 


by — cy = b) — cy = +++ = bg — Gp = 9, 


orb; =c; fort =0,1,...,2—1. Therefore, we have shown uniqueness. 


Example 21.14. 


Since x? +1 is irreducible over R, (z? +1) is a maximal ideal in R[x]. So E = R[z]/(x? +1) is a field extension of R that 
contains a root of 22 +1. Leta =x +(x? +1). 


Solution 


We can identify EZ with the complex numbers. By Proposition 21.12, E is isomorphic to R(a) = {a+ba:a,b€ R}. We 
know that a? = —1 in E, since 


of 41 =(24+ (2? +1))? + (14 (2? +1)) 
= (a? +1)+ (2? +1) 
=a 


Hence, we have an isomorphism of R(a) with C defined by the map that takes a+ ba toa+bi. 


Let & be a field extension of a field F’. If we regard E as a vector space over F’, then we can bring the machinery of linear algebra 
to bear on the problems that we will encounter in our study of fields. The elements in the field & are vectors; the elements in the 
field F' are scalars. We can think of addition in B as adding vectors. When we multiply an element in & by an element of F’, we 
are multiplying a vector by a scalar. This view of field extensions is especially fruitful if a field extension F& of F is a finite 
dimensional vector space over F’, and Theorem 21.13 states that E = F(a) is finite dimensional vector space over F’ with basis 
{aa eccyal 


If an extension field F of a field F' is a finite dimensional vector space over F' of dimension n, then we say that F is a finite 
extension of degree n over F’. We write 


[E: F] =n. 


to indicate the dimension of F over F’. 


Theorem 21.15. 


Every finite extension field E of a field F is an algebraic extension. 
Proof 
Let a € E. Since [E’: F'] =n, the elements 
d Wire eee 
cannot be linearly independent. Hence, there exist a; € F’, not all zero, such that 


n—-1 


Ana” +an,_10” +-+-+a;a+aq =0. 


Therefore, 


p(x) =anz” +---+a9 € Fla] 


GNU Free Documentation License 21.1.5 https ://math.libretexts.org/@go/page/81208 


Oibretexts: 


| is a nonzero polynomial with p(a) = 0. 


Remark 21.16. 


Theorem 21.15 says that every finite extension of a field F' is an algebraic extension. The converse is false, however. We will 
leave it as an exercise to show that the set of all elements in R that are algebraic over Q forms an infinite field extension of Q. 


The next theorem is a counting theorem, similar to Lagrange's Theorem in group theory. Theorem 21.17 will prove to be an 
extremely useful tool in our investigation of finite field extensions. 


Theorem 21.17. 


If E is a finite extension of F and K is a finite extension of E, then K is a finite extension of F and 
[Kk : F] =(K: E|[£: F}. 
Proof 


Let {a1,...,@n} be a basis for E as a vector space over F and {(1,..., Bm} be a basis for K as a vector space over FE. 
We claim that {a;8;} is a basis for K over F. We will first show that these vectors span K. Let uc K. Then 
u = doi", 5;8; and b; = dU, aiza;, where b; € B anda, € F. Then 


m n 
OS Sy So aja B;= So aij (83). 
j=l \i=1 ij 
So the mn vectors a;; must span K over F’. 


We must show that {a;6,;} are linearly independent. Recall that a set of vectors v1, V2,...,Un in a vector space V are 
linearly independent if 


Cy Vy +0202 +++: +enUn = 0 
implies that 


Ci =c9 =:::=c, = 0. 


Let 
U= ST a (a:8)) = (0) 
ag 


for ci; € F’. We need to prove that all of the cjj's are zero. We can rewrite wu as 


se (See B; =0, 
i=1 


j=l 


where }°; ¢,;a; € E. Since the G,'s are linearly independent over F, it must be the case that 


n 
) Cj, = 0 
i=1 


for all 7. However, the a; are also linearly independent over F’. Therefore, c;; =0 for all 2 and 7, which completes the 
proof. 


The following corollary is easily proved using mathematical induction. 
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Corollary 21.18. 


If F; is a field fori =1,...,k and F;,, is a finite extension of F;, then Fy, is a finite extension of F, and 


\[ [F_k : F_1] = [F_k : F_{k-1} ] \cdots [F_2 : F_1 ]\text{.} \nonumber \ 


Corollary 21.19. 


Let E be an extension field of F. If a € E is algebraic over F with minimal polynomial p(x) and 8 € F(a) with minimal 
polynomial q(2), then deg q(x) divides deg p(x). 


Proof 


We know that deg p(x) = [F (a): F'] and deg q(x) =|[F (8): F]. Since F C F(B) c F(a), 
[F(a) : F] = (F(a): F(8)|[F() : F. 


Example 21.20. 


Let us determine an extension field of Q containing /3+ 4/5. It is easy to determine that the minimal polynomial of 
V3+4/5 is a*—162 +4. It follows that 


[O(v3+ v5): Q] =4. 
Solution 


We know that {1, ./3 } is a basis for Q(1/3 ) over Q. Hence, /3++/5 cannot be in Q(1/3 ). It follows that 1/5 cannot be in 
Q(/3) either. Therefore, {1,/5} is a basis for Q(V/3,V5)=(Q(v3))(VW5) over Q(V3) and 
{1, /3, /5, /3/5 = V15 } is a basis for Q(/3, /5) =Q(/3+/5) over Q. This example shows that it is possible that 
some extension F'(a1,..., @n) is actually a simple extension of F' even though n > 1. 


Example 21.21. 


Let us compute a basis for Q(4/5, \/5 7), where 4/5 is the positive square root of 5 and 1/95 is the real cube root of 5. We know 
that 751 ¢ Q(W5 ), so 


[Q(W5, W527): Q0W5)] = 2. 
Solution 


It is easy to determine that {1, \/5¢ }is a basis for Q(W/5, /5 1) over Q(4/5 ). We also know that {1, /5, (1/5 )?} is a basis 
for Q(./5 ) over Q. Hence, a basis for Q(/5, 1/57) over Q is 


{1, /5i, 75, (5), (0/5 )°4, (4/5 )'i = 54/5 i or 5 i}. 


Notice that ¥/57 is a zero of z® +5. We can show that this polynomial is irreducible over Q using Eisenstein's Criterion, 
where we let p = 5. Consequently, 


Qc QAV52) C Q(V5, V5 i). 
But it must be the case that Q(W5i) = Q(W/5, 51), since the degree of both of these extensions is 6. 


Theorem 21.22. 


Let E be a field extension of F’. Then the following statements are equivalent. 


1. E is a finite extension of F. 
2. There exists a finite number of algebraic elements a1,...,Qn, € E such that E = F(ay,..., Qn). 
3. There exists a sequence of fields 


EB=F(q,...,Q) D F(a1,..-,Qn 1)D:::D F(a) DF, 
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where each field F(a1,...,a;) is algebraic over F(ay,..., Q-1). 


Proof 


(1) => (2). Let £ be a finite algebraic extension of F’. Then F is a finite dimensional vector space over F’ and there exists a 
basis consisting of elements a1,...,@,, in EB such that # = F(aj,...,a@,). Each a; is algebraic over F' by Theorem 
21.15 


(2) = (3). Suppose that F = F(aj,..., Qn), where every a; is algebraic over F’. Then 
E=F(a4,...,Qn) D F(a,...,Qn 1)D:::D F(a) DF, 


where each field F'(a1,..., a) is algebraic over F(ai,..., a1). 


(3) => (1). Let 


E=Fi(q,...,Q,) D F(a1,...,Qn-1) D::: DF(ai) DF, 
where each field F'(a1,...,a;) is algebraic over F(a1,..., a1). Since 
F(aq,...,a;) =F(a1,...,ai:1)(ai) 
is simple extension and a; is algebraic over F(a, ..., @;-1), it follows that 
[F(a1,...,a:): F(a1,...,a:-1)] 


is finite for each 7. Therefore, [F : F’ is finite. 


Algebraic Closure 


Given a field F’, the question arises as to whether or not we can find a field & such that every polynomial p(x) has a root in E. 
This leads us to the following theorem. 


Theorem 21.23. 


Let E be an extension field of F'. The set of elements in E that are algebraic over F form a field. 


Proof 


Let a, 8 € E be algebraic over F’. Then F'(a, £) is a finite extension of F’. Since every element of F'(a, 8) is algebraic 
over F', a+, af, and a/8 (6 40) are all algebraic over F’. Consequently, the set of elements in E that are algebraic 
over F’ form a field. 


Corollary 21.24. 


The set of all algebraic numbers forms a field; that is, the set of all complex numbers that are algebraic over Q makes up a 
field. 


Proof 


Add proof here and it will automatically be hidden 


Let & be a field extension of a field F’. We define the algebraic closure of a field F' in E to be the field consisting of all elements 
in & that are algebraic over F’. A field F is algebraically closed if every nonconstant polynomial in F'{x] has a root in F’. 


Theorem 21.25. 


A field F is algebraically closed if and only if every nonconstant polynomial in F' [| factors into linear factors over F'|zx]. 


Proof 
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Let F’ be an algebraically closed field. If p(x) € F'[z] is a nonconstant polynomial, then p(x) has a zero in F’, say a. 
Therefore, x —a@ must be a factor of p(x) and so p(x) = (a —a)qi(x), where deg qi (x) = deg p(x) —1. Continue this 
process with qi(x) to find a factorization 


p(x) = («—a)(x—B)q(z), 
where deg q2(x) = deg p(x) — 2. The process must eventually stop since the degree of p(z) is finite. 


Conversely, suppose that every nonconstant polynomial p(x) in Fz] factors into linear factors. Let az —b be such a 
factor. Then p(b/a) = 0. Consequently, F' is algebraically closed. 


Theorem 21.26. 


An algebraically closed field F has no proper algebraic extension E. 


Proof 


Let & be an algebraic extension of Ff’; then F C EF. Fora € E, the minimal polynomial of a is x —a. Therefore, a € F 
and F = E. 


Theorem 21.27. 


Every field F has a unique algebraic closure. 


It is a nontrivial fact that every field has a unique algebraic closure. The proof is not extremely difficult, but requires some rather 
sophisticated set theory. We refer the reader to [3], [4], or [8] for a proof of this result. 


We now state the Fundamental Theorem of Algebra, first proven by Gauss at the age of 22 in his doctoral thesis. This theorem 
states that every polynomial with coefficients in the complex numbers has a root in the complex numbers. The proof of this 
theorem will be given in Chapter 23. 


Theorem 21.28. Fundamental Theorem of Algebra. 


The field of complex numbers is algebraically closed 


This page titled 21.1: Extension Fields is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or curated 
by Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the LibreTexts 
platform; a detailed edit history is available upon request. 
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21.2: Splitting Fields 


Let F’ be a field and p(x) be a nonconstant polynomial in F'[z]. We already know that we can find a field extension of F’ that 
contains a root of p(x). However, we would like to know whether an extension F of F' containing all of the roots of p(x) exists. In 
other words, can we find a field extension of F’ such that p(z) factors into a product of linear polynomials? What is the “smallest” 
extension containing all the roots of p(x)? 


Let F bea field and p(x) = ap +a,4+--++@,2” bea nonconstant polynomial in F'[a]. An extension field E of F is a splitting 
field of p(x) if there exist elements a1,...,Q, in E such that F = F(aj,...,a,) and 


p(x) = (@ —a4)(@ — a2) ++: (@— Qn). 


A polynomial p(x) € F'[x] splits in E if it is the product of linear factors in E[z]. 


Example 21.29. 


Let p(x) = z* +22” —8 be in Q[z].Then 
Solution 


p(z) has irreducible factors x? —2 and z? +4. Therefore, the field Q(./2, 4) is a splitting field for p(x). 


Example 21.30. 


Let p(x) =x? —3 be in Q[z]. Then p(z) has a root in the field Q(1/3 ). 
Solution 
However, this field is not a splitting field for p(a) since the complex cube roots of 3, 


=V¥3+(v3)" 
2 ? 


are not in Q(1/3 ). 


Theorem 21.31. 


Let p(x) € F'[z] be a nonconstant polynomial. Then there exists a splitting field E for p(x). 


Proof 


We will use mathematical induction on the degree of p(«). If deg p(x) =1, then p(x) is a linear polynomial and EB = F’. 
Assume that the theorem is true for all polynomials of degree k with 1 <k <n and let deg p(x) =n. We can assume that 
p(z) is irreducible; otherwise, by our induction hypothesis, we are done. By Theorem 21.5, there exists a field A such that 
p(x) has a zero ay in K. Hence, p(x) =(#—ayj)q(x), where g(x) € K[a]. Since degq(z) =n-—1, there exists a 
splitting field H > K of q(x) that contains the zeros a2,..., Qn of p(a) by our induction hypothesis. Consequently, 


E=K(az2,...,Qn) = F(aj,...,Qn) 
is a splitting field of p(x). 
The question of uniqueness now arises for splitting fields. This question is answered in the affirmative. Given two splitting fields 


K and L of a polynomial p(x) € Fz], there exists a field isomorphism ¢: K — L that preserves F’. In order to prove this result, 
we must first prove a lemma. 


Theorem 21.32. 


Let ¢: FE > F be an isomorphism of fields. Let K be an extension field of F anda € K be algebraic over & with minimal 
polynomial p(x). Suppose that L is an extension field of F’ such that £ is root of the polynomial in F'[x] obtained from p(x) 
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under the image of ¢. Then ¢ extends to a unique isomorphism ¢ : E(a) —> F(8) such that 6(a) = 8 and ¢ agrees with ¢ on 
FE. 


Proof 


If p(x) has degree n, then by Theorem 21.13we can write any element in E(q) as a linear combination of 1,a,...,a” 1. 


Therefore, the isomorphism that we are seeking must be 


(ap +a, +--+ +a,-10""1) = b(a9) + (a1) 8+---+6(an-1)8"", 
where 


=il 
ap +aya+-+++an10" 


is an element in E(a). The fact that ¢ is an isomorphism could be checked by direct computation; however, it is easier to 
observe that ¢ is a composition of maps that we already know to be isomorphisms. 


We can extend ¢ to be an isomorphism from Ez] to F'[x], which we will also denote by ¢, by letting 
(a +a1% +++» + ana”) = b(a0) + O(a1)@ +--+ +(an)2”. 


This extension agrees with the original isomorphism ¢: H — F’, since constant polynomials get mapped to constant 
polynomials. By assumption, ¢(p(x))= q(x); hence, @ maps (p(x)) onto (q(x)). Consequently, we have an 
isomorphism # : E[a]/(p(x)) > F'[z]/(q(x)). By Proposition 21.12 we have isomorphisms o : E[x]/(p(x)) > E(a) 
and 7: F|a]/(q(z)) > F(@), defined by evaluation at a and £, respectively. Therefore, ¢=Two is the required 
isomorphism (see Figure 21.33). 


Efz|/(p(2)) ——> Flal/(a(z)) 


r b 


Ea) —> F(p) 
| | 
¢ 
E — F 
Figure 21.33. 


We leave the proof of uniqueness as a exercise. 


Theorem 21.34. 


Let 6: E— F be an isomorphism of fields and let p(x) be a nonconstant polynomial in E|x] and q(x) the corresponding 
polynomial in F' [x] under the isomorphism. If K is a splitting field of p(«) and L is a splitting field of q(x), then @ extends to 
an isomorphism w : K — L. 


Proof 


We will use mathematical induction on the degree of p(x). We can assume that p(x) is irreducible over #. Therefore, q(x) 
is also irreducible over F’. If deg p(az) =1, then by the definition of a splitting field, A = H and L =F and there is 
nothing to prove. 


Assume that the theorem holds for all polynomials of degree less than n. Since K is a splitting field of p(x), all of the 
roots of p(x) are in K. Choose one of these roots, say a, such that # C E(a) C K. Similarly, we can find a root 8 of 
q(x) in L such that F C F(8) CL. By Lemma 21.32 there exists an isomorphism ¢: E(a)—> F(8) such that 
¢(a) = B and ¢ agrees with ¢ on E (see Figure 21.35). 


GNU Free Documentation License 21-23 https ://math.libretexts.org/@go/page/81209 


Oibretexts: 


’ 
K — OL 
\- | 

E(a) ——> F(8) 
| | 
E ey F 
Figure 21.35. 


Now write p(x) = (x —a)f(x) and q(x) = (x —)g(x), where the degrees of f(x) and g(x) are less than the degrees 
of p(x) and q(x), respectively. The field extension K is a splitting field for f(x) over H(a@), and L is a splitting field for 
g(x) over F'(8). By our induction hypothesis there exists an isomorphism wy: K —> L such that % agrees with gon E(a). 
Hence, there exists an isomorphism w : kK — L such that a agrees with ¢ on E. 


Corollary 21.36. 


Let p(x) be a polynomial in F'[x]. Then there exists a splitting field K of p(x) that is unique up to isomorphism. 


This page titled 21.2: Splitting Fields is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or curated 


by Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the LibreTexts 
platform; a detailed edit history is available upon request. 
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21.3: Geometric Constructions 


In ancient Greece, three classic problems were posed. These problems are geometric in nature and involve straightedge-and- 
compass constructions from what is now high school geometry; that is, we are allowed to use only a straightedge and compass to 
solve them. The problems can be stated as follows. 


1. Given an arbitrary angle, can one trisect the angle into three equal subangles using only a straightedge and compass? 

2. Given an arbitrary circle, can one construct a square with the same area using only a straightedge and compass? 

3. Given a cube, can one construct the edge of another cube having twice the volume of the original? Again, we are only allowed 
to use a straightedge and compass to do the construction. 


After puzzling mathematicians for over two thousand years, each of these constructions was finally shown to be impossible. We 
will use the theory of fields to provide a proof that the solutions do not exist. It is quite remarkable that the long-sought solution to 
each of these three geometric problems came from abstract algebra. 


First, let us determine more specifically what we mean by a straightedge and compass, and also examine the nature of these 
problems in a bit more depth. To begin with, a straightedge is not a ruler. We cannot measure arbitrary lengths with a straightedge. 
It is merely a tool for drawing a line through two points. The statement that the trisection of an arbitrary angle is impossible means 
that there is at least one angle that is impossible to trisect with a straightedge-and-compass construction. Certainly it is possible to 
trisect an angle in special cases. We can construct a 30° angle; hence, it is possible to trisect a 90° angle. However, we will show 
that it is impossible to construct a 20° angle. Therefore, we cannot trisect a 60° angle. 


Constructible Numbers 


A real number a is constructible if we can construct a line segment of length |a| in a finite number of steps from a segment of unit 
length by using a straightedge and compass. 


The set of all constructible real numbers forms a subfield F of the field of real numbers. 


Proof 


Let @ and £ be constructible numbers. We must show that a+ 6, a—f8, a8, and a/8 (8 £0) are also constructible 
numbers. We can assume that both @ and £ are positive with a > £. It is quite obvious how to construct a+ anda — 8. 
To find a line segment with length a, we assume that 8 > 1 and construct the triangle in Figure 21.38such that triangles 
AABC and AAD E are similar. Since a/1 = 2/8, the line segment x has length af. A similar construction can be made 
if 8 <1. We will leave it as an exercise to show that the same triangle can be used to construct a/@for 8 #0. 


D 


x | 


Figure 21.38.Construction of products 
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If a is a constructible number, then ./a is a constructible number. 


Proof 


In Figure 21.40the triangles AABD, ABCD, and AABC are similar; hence, 1/2 = x/a, or 2? =a. 


B 


A D C 


Figure 21.40. Construction of roots 


By Theorem 21.37, we can locate in the plane any point P = (p, q) that has rational coordinates p and g. We need to know what 
other points can be constructed with a compass and straightedge from points with rational coordinates. 


Let F be a subfield of R. 
1. If a line contains two points in F’, then it has the equation az + by +c =0, where a, b, and care in F. 
2. If a circle has a center at a point with coordinates in F' and a radius that is also in F’, then it has the equation 
x2 +y2+dx+ey+ f=0, where d, e, and f are in F. 
Proof 


Let (x1, yi) and (x2, y2) be points on a line whose coordinates are in F’. If x] = 2, then the equation of the line through 
the two points is  —x,; =0, which has the form ax + by+c=0. If x1 #22, then the equation of the line through the 
two points is given by 


which can also be put into the proper form. 


To prove the second part of the lemma, suppose that (x1, y1) is the center of a circle of radius r. Then the circle has the 
equation 


(e-1)? +(y—m)? -r? =0. 


This equation can easily be put into the appropriate form. 


Starting with a field of constructible numbers F’, we have three possible ways of constructing additional points in R with a 
compass and straightedge. 


1. To find possible new points in R, we can take the intersection of two lines, each of which passes through two known points 
with coordinates in F’. 

2. The intersection of a line that passes through two points that have coordinates in F’ and a circle whose center has coordinates in 
F with radius of a length in F will give new points in R. 
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3. We can obtain new points in R by intersecting two circles whose centers have coordinates in F' and whose radii are of lengths 
inF. 


The first case gives no new points in R, since the solution of two equations of the form az + by+-c=0 having coefficients in F 
will always be in F’. The third case can be reduced to the second case. Let 

ety +daeteyt+fi =0 

aa y’ +dyx+ e2yu +r fa =0 


be the equations of two circles, where d;, e;, and f; are in F' for i =1, 2. These circles have the same intersection as the circle 


ety+tdaetert+ fi =0 
and the line 
(d, — dy)x + b(e2 —e1)y + (fo — fir) =0. 


The last equation is that of the chord passing through the intersection points of the two circles. Hence, the intersection of two 
circles can be reduced to the case of an intersection of a line with a circle. 


Considering the case of the intersection of a line and a circle, we must determine the nature of the solutions of the equations 
az +by+c =0 
gt+y*tdr+teyt+f =0. 


If we eliminate y from these equations, we obtain an equation of the form Ax? + Bx +C =0, where A, B, and C are in F. The 
z coordinate of the intersection points is given by 


—B+,./ B’ —4AC 


2A 
and is in F(,/a@ ), where a = B? —4AC > 0. We have proven the following lemma. 


a 


Let F be a field of constructible numbers. Then the points determined by the intersections of lines and circles in F lie in the 
field F(./a ) for some a in F’. 


Theorem 21.43 


A real number a is a constructible number if and only if there exists a sequence of fields 
Q=Kychc:::-ch, 
such that F, = F;_1(./a; ) with a; € F; and a € Fy. In particular, there exists an integer k > 0 such that [Q(a) : Q| = ONE 


Proof 


The existence of the F;'s and the a;,'s is a direct consequence of Lemma 21.42 and of the fact that 


[Fi : Q| = [Fy : Fy-1| (Fra : Fy3| shies [Fy : Q| = Of. 


Corollary 21.44 


The field of all constructible numbers is an algebraic extension of \({\mathbb Q}\text{.}\ 
As we can see by the field of constructible numbers, not every algebraic extension of a field is a finite extension. 


Doubling the Cube and Squaring the Circle 


We are now ready to investigate the classical problems of doubling the cube and squaring the circle. We can use the field of 
constructible numbers to show exactly when a particular geometric construction can be accomplished. 
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Doubling the cube is impossible. 


Given the edge of the cube, it is impossible to construct with a straightedge and compass the edge of the cube that has twice the 
volume of the original cube. Let the original cube have an edge of length 1 and, therefore, a volume of 1. If we could construct a 
cube having a volume of 2, then this new cube would have an edge of length \/2. However, \/2 is a zero of the irreducible 
polynomial x? — 2 over Q; hence, 


[Q(v2):Q =3 


This is impossible, since 3 is not a power of 2. 


Squaring the circle. 


Suppose that we have a circle of radius 1. The area of the circle is 77; therefore, we must be able to construct a square with side ,/7. 
This is impossible since 7 and consequently ,/z are both transcendental. Therefore, using a straightedge and compass, it is not 
possible to construct a square with the same area as the circle. 


Trisecting an Angle 


Trisecting an arbitrary angle is impossible. We will show that it is impossible to construct a 20° angle. Consequently, a 60° angle 
cannot be trisected. We first need to calculate the triple-angle formula for the cosine: 


cos 30 =cos(26+ 6) 
= cos 20cos6-—sin20sin0 
= (2cos” @—1) cos — 2 sin” 9cos6 
= (2 cos” 6— 1) cos 6 — 2(1 — cos” 6) cos 
=4cos® 0—3cos6. 


The angle 6 can be constructed if and only if a = cos 6 is constructible. Let @ = 20°. Then cos 30 = cos60° = 1/2. By the triple- 
angle formula for the cosine, 


1 

4a? —3a = =. 

a eer 

Therefore, a is a zero of 82* —6x—1. This polynomial has no factors in Z[x], and hence is irreducible over Q[z]. Thus, 


[Q(a) : Q| = 3. Consequently, a cannot be a constructible number. 


Historical Note 


Algebraic number theory uses the tools of algebra to solve problems in number theory. Modern algebraic number theory began 
with Pierre de Fermat (1601-1665). Certainly we can find many positive integers that satisfy the equation x? + y” = z?; 
Fermat conjectured that the equation x” + y” =z” has no positive integer solutions for n > 3. He stated in the margin of his 
copy of the Latin translation of Diophantus' Arithmetica that he had found a marvelous proof of this theorem, but that the 
margin of the book was too narrow to contain it. Building on work of other mathematicians, it was Andrew Wiles who finally 
succeeded in proving Fermat's Last Theorem in the 1990s. Wiles's achievement was reported on the front page of the New 


York Times. 


Attempts to prove Fermat's Last Theorem have led to important contributions to algebraic number theory by such notable 
mathematicians as Leonhard Euler (1707-1783). Significant advances in the understanding of Fermat's Last Theorem were 
made by Ernst Kummer (1810-1893). Kummer's student, Leopold Kronecker (1823-1891), became one of the leading 
algebraists of the nineteenth century. Kronecker's theory of ideals and his study of algebraic number theory added much to the 
understanding of fields. 


David Hilbert (1862-1943) and Hermann Minkowski (1864-1909) were among the mathematicians who led the way in this 
subject at the beginning of the twentieth century. Hilbert and Minkowski were both mathematicians at Géttingen University in 
Germany. Gottingen was truly one the most important centers of mathematical research during the last two centuries. The large 
number of exceptional mathematicians who studied there included Gauss, Dirichlet, Riemann, Dedekind, Noether, and Weyl. 


André Weil answered questions in number theory using algebraic geometry, a field of mathematics that studies geometry by 
studying commutative rings. From about 1955 to 1970, Alexander Grothendieck dominated the field of algebraic geometry. 
Pierre Deligne, a student of Grothendieck, solved several of Weil's number-theoretic conjectures. One of the most recent 
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contributions to algebra and number theory is Gerd Falting's proof of the Mordell-Weil conjecture. This conjecture of Mordell 
and Weil essentially says that certain polynomials p(z, y) in Z[zx, y] have only a finite number of integral solutions. 


This page titled 21.3: Geometric Constructions is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or 
curated by Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the 
LibreTexts platform; a detailed edit history is available upon request. 
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21.4: Reading Questions 


What does it mean for an extension field F of a field F' to be a simple extension of F’? 


What is the definition of a minimal polynomial of an element a € EF, where F is an extension of F’, and @ is algebraic over 
? 


Describe how linear algebra enters into this chapter. What critical result relies on a proof that is almost entirely linear algebra? 
What is the definition of an algebraically closed field? 


What is a splitting field of a polynomial p(x) € F[x]|? 


7B 7B BR ::B 


This page titled 21.4: Reading Questions is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or 
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LibreTexts platform; a detailed edit history is available upon request. 
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21.5: Exercises 


Show that each of the following numbers is algebraic over Q by finding the minimal polynomial of the number over Q. 


ty 37 
2. /3+ 75 
3. f/3+V2i 


4.cosO+isin6 for 0 = 27/n withhn EN 


BAW 


Find a basis for each of the following field extensions. What is the degree of each extension? 


1. Q(V3, V6) over @ 
2. Q(B, V3) over 

3. Q(+/2, i) over Q 

4 QA V3, V5, V7) over Q 

5. O( V3, /2) over 

6. Q(V8 ) over Q(V2 ) 

7. Qi, V2 +4, V3 +i) over Q 

8. Q(V2+ V5) over Q(V5) 

9. Q(v2, V6+V10) over Q(v3+ v5) 


Find the splitting field for each of the following polynomials. 


1. ct —102? +21 over Q 
2.24+1 over Q 

3.22 +22 +2 over Zs 

4. x? —3 over Q 


Consider the field extension Q(+/3, 1) over Q. 


1. Find a basis for the field extension Q(4/3, 7) over Q. Conclude that [Q(/3, 7) : Q| = 8. 
2. Find all subfields F of Q(4/3, 2) such that [F' : Q] = 2. 
3. Find all subfields F of Q(./3, 7) such that [F : Q] =4. 


Show that Zs [x] / (xz? +2 +1) is a field with eight elements. Construct a multiplication table for the multiplicative group of 
the field. 


Show that the regular 9-gon is not constructible with a straightedge and compass, but that the regular 20-gon is constructible. 


GNU Free Documentation License 215.1 https ://math.libretexts.org/@go/page/81212 


Oibretexts: 


Prove that the cosine of one degree (cos 1°) is algebraic over Q but not constructible. 
Can a cube be constructed with three times the volume of a given cube? 


Prove that Q(1/3, /3, /3, ...) is an algebraic extension of Q but not a finite extension. 


AA: 


Prove or disprove: 7 is algebraic over Q(1°). 


= 


Let p(x) be a nonconstant polynomial of degree n in F'[x]. Prove that there exists a splitting field EB for p(x) such that 
[ ]<nl. 


& 
zy 


Prove or disprove: Q(1/2 ) = Q(/3). 


Prove that the fields Q(1/3 ) and Q(4/3) are isomorphic but not equal. 


Let K be an algebraic extension of #, and EF an algebraic extension of F’. Prove that K is algebraic over F’. [Caution: Do not 
assume that the extensions are finite. ] 


3 


Prove or disprove: Z[x]/(x° — 2) isa field. 


Let F be a field of characteristic p. Prove that p(x) = «? —a either is irreducible over F or splits in F’. 


Let E be the algebraic closure of a field F’. Prove that every polynomial p(x) in F'[a] splits in E. 


If every irreducible polynomial p(x) in F'[z] is linear, show that F is an algebraically closed field. 


78 :B BBB Be 
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Prove that if @ and @ are constructible numbers such that 8 4 0, then so is a/. 
Show that the set of all elements in R that are algebraic over Q form a field extension of Q that is not finite. 


Let EF be an algebraic extension of a field F’, and let o be an automorphism of F leaving F' fixed. Let a € E. Show that o 
induces a permutation of the set of all zeros of the minimal polynomial of a that are in EL. 


Show that Q(/3, V7) = Q(./3+</7). Extend your proof to show that Q(,/a, Vb) = Q(.fa + Vb), where a#b and 


neither a nor b is a perfect square. 


Let & be a finite extension of a field F. If [fH : F] =2, show that E is a splitting field of F for some polynomial 
f(z) € Fla]. 


Prove or disprove: Given a polynomial p(x) in Zg [x], it is possible to construct a ring R such that p(x) has a root in R. 
Let E be a field extension of F anda € E. Determine [F(a) : F(a*)]. 
Let a, 6 be transcendental over Q. Prove that either af or a + f is also transcendental. 


Let E be an extension field of F and a € E be transcendental over F’. Prove that every element in F(a) that is not in F' is 
also transcendental over F’. 


Let a be a root of an irreducible monic polynomial p(x) € F'[x], with deg p = n. Prove that [F (a): F] =n. 


IB EB EB EB BB eB ee eB 
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21.7: Sage 


In Sage, and other places, an extension of the rationals is called a “number field.” They are one of Sage's most mature features. 


Number Fields 


There are several ways to create a number field. We are familiar with the syntax where we adjoin an irrational number that we can 
write with traditional combinations of arithmetic and roots. 


We can also specify the element we want to adjoin as the root of a monic irreducible polynomial. One approach is to construct the 
polynomial ring first so that the polynomial has the location of its coefficients specified properly. 


Rather than building the whole polynomial ring, we can simply introduce a variable as the generator of a polynomial ring and then 
create polynomials from this variable. This spares us naming the polynomial ring. Notice in the example that both instances of Zz 
are necessary. 


We can recover the polynomial used to create a number field, even if we constructed it by giving an expression for an irrational 
element. In this case, the polynomial is the minimal polynomial of the element. 


For any element of a number field, Sage will obligingly compute its minimal polynomial. 


Substituting element back into the alleged minimal polynomial and getting back zero is not convincing evidence that it is the 
minimal polynomial, but it is heartening. 


Relative and Absolute Number Fields 


With Sage we can adjoin several elements at once and we can build nested towers of number fields. Sage uses the term “absolute” 
to refer to a number field viewed as an extension of the rationals themselves, and the term “relative” to refer to a number field 
constructed, or viewed, as an extension of another (nontrivial) number field. 


The number field A has been constructed mathematically as what we would write as Q C Q[/3] C Q[/3, /2]. Notice the 
slight difference in ordering of the elements we are adjoining, and notice how the number fields use slightly fancier internal names 
( sgrt2 , sqgrt3 ) for the new elements. 


We can “flatten” a relative field to view it as an absolute field, which may have been our intention from the start. Here we create a 
new number field from A _ that makes it a pure absolute number field. 


Once we construct an absolute number field this way, we can recover isomorphisms to and from the absolute field. Recall that our 
tower was built with generators a and b , while the flattened tower is generated by c .The .structure() method 
returns a pair of functions, with the absolute number field as the domain and codomain (in that order). 


This tells us that the single generator of the flattened tower, Cc , is equal to ./2—./3, and further, each of ./2 and 4/3 can be 
expressed as polynomial functions of c . With these connections, you might want to compute the final two expressions in Cc by 
hand, and appreciate the work Sage does to determine these for us. This computation is an example of the conclusion of the 
upcoming Theorem 23.13. 


Many number field methods have both relative and absolute versions, and we will also find it more convenient to work in a tower 
or a flattened version, thus the isomorphisms between the two can be invaluable for translating both questions and answers. 


As a vector space over Q, or over another number field, number fields that are finite extensions have a dimension, called the 
degree. These are easy to get from Sage, though for a relative field, we need to be more precise about which degree we desire. 


Splitting Fields 


Here is a concrete example of how to use Sage to construct a splitting field of a polynomial. Consider p(x) = z* +27—1. We 
first build a number field with a single root, and then factor the polynomial over this new, larger, field. 


So our polynomial factors partially into two linear factors and a quadratic factor. But notice that the quadratic factor has a 
coefficient that is irrational, a? +1, so the quadratic factor properly belongs in the polynomial ring over ™ andnotover QQ . 


We build an extension containing a root of the quadratic factor, called og here. Then, rather than using the polygen( ) 
function, we build an entire polynomial ring R over N with the indeterminate z . The reason for doing this is we can 
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illustrate how we “upgrade” the polynomial p with the syntax R(p) to go from having coefficients in ™ to having 
coefficients in N . 


So we have a field, \) , where our polynomial factors into linear factors with coefficients from the field. We can get another 
factorization by converting \ to an absolute number field and factoring there. We need to recreate the polynomial over N\ , 
since a substitution will carry coefficients from the wrong ring. 


This is an interesting alternative, in that the roots of the polynomial are expressions in terms of the single generator c . Since the 
roots involve a seventh power of Cc , we might suspect (but not be certain) that the minimal polynomial of c has degree 8 and 
that P is a degree 8 extension of the rationals. Indeed P (or N ) isa splitting field for p(x) = 2+ +z? —1. The roots are not 
really as bad as they appear — lets convert them back to the relative number field. 


First we want to rewrite a single factor (the first) in the form (w —r) to identify the root with the correct signs. 
With the conversion isomorphisms, we can recognize the roots for what they are. 


So the rather complicated expression in C_ is just the negative of the root we adjoined in the second step of constructing the tower 
of number fields. It would be a good exercise to see what happens to the other three roots (being careful to get the signs right on 
each root). 


This is a good opportunity to illustrate Theorem 21.17. 


Algebraic Numbers 


Corollary 21.24 says that the set of all algebraic numbers forms a field. This field is implemented in Sage as QQbar . This 
allows for finding roots of polynomials as exact quantities which display as inexact numbers. 


So we asked for the roots of a polynomial over the rationals, but requested any root that may lie outside the rationals and within the 
field of algebraic numbers. Since the field of algebraic numbers contains all such roots, we get a full four roots of the fourth-degree 
polynomial. These roots are computed to lie within an interval and the question mark indicates that the preceding digits are 
accurate. (The integers paired with each root are the multiplicities of that root. Use the keyword multiplicities=False to 
turn them off.) Let us take a look under the hood and see how Sage manages the field of algebraic numbers. 


Three items are associated with this initial root. First is a number field, with generator a and a defining polynomial similar to the 
polynomial we are finding the roots of, but not identical. Second is an expression in the generator a , which is the actual root. 
You might evaluate this expression with the numerical approximation of a , coming next, to verify this is a root. Finally, there is a 
ring homomorphism from the number field to the “Algebraic Real Field”, AA , the subfield of QQbar with just real elements, 
which associates the generator a withthe number -1.2/720196495140697 . Let us verify, in two ways, that the root given 
is really a root. 


Now that we have enough theory to understand the field of algebraic numbers, and a natural way to represent them exactly, you 
might consider the operations in the field. If we take two algebraic numbers and add them together, we get another algebraic 
number (Corollary 21.24). So what is the resulting minimal polynomial? How is it computed in Sage? You could read the source 
code if you wanted the answer. 


Geometric Constructions 


Sage can do a lot of things, but it is not yet able to lay out lines with a straightedge and compass. However, we can very quickly 
determine that trisecting a 60 degree angle is impossible. We adjoin the cosine of a 20 degree angle (in radians) to the rationals, 
determine the degree of the extension, and check that it is not an integer power of 2. In one line. Sweet. 
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21.8: Sage Exercise 


Create the polynomial p(x) = 2° +2x++1 over Z3. Verify that it does not have any linear factors by evaluating p(z) with 
each element of Zs, and then check that p(z) is irreducible. 


Create a finite field of order 3° with the FiniteField() command, but include the modulus keyword set to the 
polynomial p(x) to override the default choice. 


Recreate p(x) as a polynomial over this field. Check each of the 3° = 243 elements of the field to see if they are roots of the 
polynomial and list all of the elements which are roots. Finally, request that Sage give a factorization of p() over the field, 
and comment on the relationship between your list of roots and your factorization. 


This problem continues the previous one. Build the ring of polynomials over Z3 and within this ring use p(z) to generate a 
principal ideal. Finally construct the quotient of the polynomial ring by the ideal. Since the polynomial is irreducible, this 
quotient ring is a field, and by Proposition 21.12 this quotient ring is isomorphic to the number field in the previous problem. 


Borrowing from your results in the previous question, construct five roots of the polynomial p(z) within this quotient ring, but 
now as expressions in the generator of the quotient ring (which is technically a coset). Use Sage to verify that they are indeed 
roots. This demonstrates using a quotient ring to create a splitting field for an irreducible polynomial over a finite field. 


The subsection Algebraic Elements relies on techniques from linear algebra and contains Theorem 21.15: every finite 
extension is an algebraic extension. This exercise will help you understand this proof. 


The polynomial r(#) = x’ +2a2+2 is irreducible over the rationals (Eisenstein's criterion with prime p—2). Create a 
number field that contains a root of r(x). By Theorem 21.15, and the remark following, every element of this finite field 
extension is an algebraic number, and hence satisfies some polynomial over the base field (it is this polynomial that Sage will 
produce with the .minpoly() method). This exercise will show how we can use just linear algebra to determine this 
minimal polynomial. 


Suppose that a is the generator of the number field you just created with r(x). Then we will determine the minimal 
polynomial of t = 3a + 1 using just linear algebra. According to the proof, the first five powers of t (start counting 
from zero) will be linearly dependent. (Why?) So a nontrivial relation of linear dependence on these powers will provide the 
coefficients of a polynomial with t as a root. Compute these five powers, then construct the correct linear system to 
determine the coefficients of the minimal polynomial, solve the system, and suitably interpret its solutions. 


Hints: The vector() and matrix() commands will create vectors and matrices, and the .solve_right() 
method for matrices can be used to find solutions. Given an element of the number field, which will necessarily be a 
polynomial in the generator a ,the .vector() method of the element will provide the coefficients of this polynomial in 
a list. 


Construct the splitting field of s(z) =2*+a?+1 and find a factorization of s(x) over this field into linear factors. 


Form the number field, K, which contains a root of the irreducible polynomial q(x) = x3 + 3x? +32 —2. Name your root 
a . Verify that g(a) factors, but does not split, over K. With K now as the base field, form an extension of K where the 
quadratic factor of g(x) has a root. Name this root } , and call this second extension of the tower L. 
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Use M.<c> = L.absolute_field() to form the flattened tower that is the absolute number field ™ . Find the 
defining polynomial of © withthe .polynomial() method. From this polynomial, which must have the generator c 
as a root, you should be able to use elementary algebra to write the generator as a fairly simple expression. 


M should be the splitting field of g(a). To see this, start over, and build from scratch a new number field, P, using the simple 
expression for c that you just found. Use das the name of the root used to construct P .Since d isa root of the simple 
minimal polynomial for c , you should be able to write an expression for that a pre-calculus student would recognize. 


Now factor the original polynomial g(z) (with rational coefficients) over P, to see the polynomial split (as expected). Using 

this factorization, and your simple expression for cd write simplified expressions for the three roots of g(x). See if you can 

convert between the two versions of the roots “by hand”, and without using the isomorphisms provided by the 
.Structure() methodon ™ . 
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CHAPTER OVERVIEW 


22: Finite Fields 


Finite fields appear in many applications of algebra, including coding theory and cryptography. We already know one finite field, 
Zy, where p is prime. In this chapter we will show that a unique finite field of order p” exists for every prime p, where n is a 
positive integer. Finite fields are also called Galois fields in honor of Evariste Galois, who was one of the first mathematicians to 
investigate them. 

22.1: Structure of a Finite Field 

22.2: Polynomial Codes 

22.3: Reading Questions 

22.4: Exercises 

22.5: Additional Exercises- Error Correction for BCH Codes 

22.6: References and Suggested Readings 

22.7: Sage 

22.8: Sage Exercises 


This page titled 22: Finite Fields is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or curated by 
Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the LibreTexts 
platform; a detailed edit history is available upon request. 


Oibretexts: 


22.1: Structure of a Finite Field 


Recall that a field F' has characteristic p if p is the smallest positive integer such that for every nonzero element @ in F’, we have 
pa =0. If no such integer exists, then F’ has characteristic 0. From Theorem 16.19 we know that p must be prime. Suppose that F’ 
is a finite field with n elements. Then na = 0 for all a in F’. Consequently, the characteristic of /’ must be p, where p is a prime 
dividing n. This discussion is summarized in the following proposition. 


Proposition 22.1. 


If F is a finite field, then the characteristic of F is p, where p is prime. 


Throughout this chapter we will assume that p is a prime number unless otherwise stated. 


Proposition 22.2. 


If F is a finite field of characteristic p, then the order of F is p” for somen € N. 


Proof 
Let 6: Z— F be the ring homomorphism defined by ¢(n) =n-1. Since the characteristic of F is p, the kernel of 
must be pZ and the image of ¢ must be a subfield of F' isomorphic to Z,. We will denote this subfield by K. Since F’ is a 
finite field, it must be a finite extension of K and, therefore, an algebraic extension of K. Suppose that [F’: K] =n is the 
dimension of F', where F' is a K vector space. There must exist elements a1,...,@, € F' such that any element a in F 
can be written uniquely in the form 


A= 4101 +++*++AnQn, 


where the a;'s are in K. Since there are p elements in K, there are p” possible linear combinations of the a;'s. Therefore, 
the order of F’ must be p”. 


Lemma 22.3. Freshman's Dream 


Let p be prime and D be an integral domain of characteristic p. Then 
a?” + bP" — (a+b) 
for all positive integers n. 


Proof 


We will prove this lemma using mathematical induction on n. We can use the binomial formula (see Chapter 2, Example 
2.4) to verify the case for n = 1; that is, 


IfO0<k<p, then 


()-aea 


must be divisible by p, since p cannot divide k!(p—k)!. Note that D is an integral domain of characteristic p, so all but 
the first and last terms in the sum must be zero. Therefore, (a +b)? = a? + BP. 


Now suppose that the result holds for all k, where 1 <k <n. By the induction hypothesis, 


(a+b) = ((a-+b)?)”” = (a? +B)" = (a?) + (PP =a 


Therefore, the lemma is true for m+ 1 and the proof is complete. 
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Let F bea field. A polynomial f(z) € F'[z] of degree n is separable if it has n distinct roots in the splitting field of f(x); that is, 
f(x) is separable when it factors into distinct linear factors over the splitting field of f. An extension EF of F' is a separable 
extension of F' if every element in EF is the root of a separable polynomial in F'[a]. 


Example 22.4. 


The polynomial x? — 2 is separable over Q since it factors as (x — /2 )(x + 2). In fact, Q(./2 ) is a separable extension of 
Q. Leta =a+b,/2 be any element in Q(./2 ). If b = 0, then 


Solution 


a isa root of z —a. If b £0, then a is the root of the separable polynomial 


a” —2ax +a? — 2b? = (x — (a +b,/2))(a —(a—by2)). 


Fortunately, we have an easy test to determine the separability of any polynomial. Let 
f(z) =a9 +a,@+4+---+an2” 
be any polynomial in F'[x]. Define the derivative of f(x) to be 


f'(x) =a, +2ag¢7+---+nayz” 1. 


Let F be a field and f(x) € F'[x].Then f(a) is separable if and only if f(x) and f' (x) are relatively prime. 


Proof 


Let f(a) be separable. Then f(x) factors over some extension field of F' as f(x) = (a —ay)(x —az)---(@—an), 
where a; 4a; fori #7. Taking the derivative of f(a), we see that 


f'(x) =(@—a2)+-- (tan) 
+(x —a;)(x —a3)--+ (x — ap) 
dboac + (a =a): a (x —Qn-1). 
Hence, f(x) and f’(a) can have no common factors. 


To prove the converse, we will show that the contrapositive of the statement is true. Suppose that f(x) = (x —a)*9(z), 
where & > 1. Differentiating, we have 


f'(w) = k(x —a)** g(x) + ( —a)*g'(z). 


Therefore, f(a) and f(a) have a common factor. 


Theorem 22.6. 


For every prime p and every positive integer n, there exists a finite field F' with p” elements. Furthermore, any field of order 
p” is isomorphic to the splitting field of x?” — a over rr 


Proof 


Let f(z) =a?" —ax and let F be the splitting field of f(x). Then by Lemma 22.5, f(x) has p” distinct zeros in F, since 
f'(x) = pz"! —1 =—1 is relatively prime to f(z). We claim that the roots of f(x) form a subfield of F’. Certainly 0 
and 1 are zeros of f(x). If a and 6 are zeros of f(x), then a+ and af are also zeros of f(x), since 
a? + 6?" = (a+ p)" and a®" BP" — (aB)P". We also need to show that the additive inverse and the multiplicative 
inverse of each root of f(a) are roots of f(x). For any zero a of f(x), we know that —a is also a zero of f(x), since 


f(-a) = (—a)?" — (—a) = —a?" +a. = —(o?" —a) =0, 
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provided p is odd. If p = 2, then 
f(-a) =(-a)” —(-a) =ata=0. 


If a #0, then (a !)”" =(a®") 1 =a. Since the zeros of f(a) form a subfield of F and f(z) splits in this subfield, 
the subfield must be all of F’. 

Let E be any other field of order p”. To show that F is isomorphic to F’', we must show that every element in F is a root of 
f(x). Certainly 0 is a root of f(a). Let a be a nonzero element of . The order of the multiplicative group of nonzero 
elements of E is p” —1; hence, a”! =1 ora” —a=0. Since E contains p” elements, E must be a splitting field of 
f(x); however, by Corollary 21.36, the splitting field of any polynomial is unique up to isomorphism. 


The unique finite field with p” elements is called the Galois field of order p”. We will denote this field by \gf(p”). 


Every subfield of the Galois field \gf(p") has p™ elements, where m divides n. Conversely, if m|n for m >0, then there 
exists a unique subfield of \gf(p") isomorphic to \gf(p™). 


Proof 
Let F' be a subfield of H = \gf(p”). Then F must be a field extension of K that contains p” elements, where K’ is 
isomorphic to Zp. Then m | n, since [E:: K] =[E: F|[F': K]. 
To prove the converse, suppose that m|n for some m>0. Then p™—1 divides p” —1. Consequently, 2°"! —1 
divides z?"—1 — 1. Therefore, x?" —x must divide x?” — xz, and every zero of x?" —-x is also a zero of x” —z. Thus, 
\gf(p”) contains, as a subfield, a splitting field of z?" — x, which must be isomorphic to \¢f(p™). 


Example 22.8. 


The lattice of subfields of \gf(p?+) is given in Figure 22.9. 


Solution 


GF(p™) 


GF(p) 


Figure 22.9. Subfields of \gf(p?*) 
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With each field F' we have a multiplicative group of nonzero elements of F’ which we will denote by F’*. The multiplicative group 
of any finite field is cyclic. This result follows from the more general result that we will prove in the next theorem. 


Theorem 22.10. 


If G is a finite subgroup of F'*, the multiplicative group of nonzero elements of a field F’, then G is cyclic. 
Proof 
Let G be a finite subgroup of F’* of order n. By the Fundamental Theorem of Finite Abelian Groups (Theorem 13.4), 
G2Z Xeee x Zax y 
where n = pj --: oe and the p;,..., px are (not necessarily distinct) primes. Let m be the least common multiple of 
Dies p. Then G contains an element of order m. Since every a in G satisfies x” —1 for some r dividing m, a must 


also be a root of «” —1. Since x” —1 has at most m roots in F', m <m. On the other hand, we know that m < |G|; 
therefore, m =n. Thus, G contains an element of order n and must be cyclic. 


Corollary 22.11. 


The multiplicative group of all nonzero elements of a finite field is cyclic. 


Corollary 22.12. 


Every finite extension E of a finite field F is a simple extension of F’. 


Proof 


Let a be a generator for the cyclic group E* of nonzero elements of Z. Then F = F(a). 


Example 22.13. 


The finite field \ef(2*) is isomorphic to the field Z2 /(1+ +24). Therefore, the elements of \gf(2*) can be taken to be 
{ao +a1a +a,a? +a30°: a; € Z, andl+a+a‘t= O}. 
Solution 


Remembering that 1+a@+a*—=0, we add and multiply elements of \gf(2*) exactly as we add and multiply polynomials. 
The multiplicative group of \gf(2*) is isomorphic to Z15 with generator a: 


qa ean ieee eae 
av =a a’ =1+a+a° a’ =1+a+a*+a3 
ie ee ae edeat Qa eat sat 

a‘ =1+a a =a+a° alt =1+09° 

a =ata? a =1+at+a? a =1, 
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22.2: Polynomial Codes 


With knowledge of polynomial rings and finite fields, it is now possible to derive more sophisticated codes than those of Chapter 8. 
First let us recall that an (n,k)-block code consists of a one-to-one encoding function E : Zs — Zy and a decoding function 
D:Z3 -+ ZS. The code is error-correcting if D is onto. A code is a linear code if it is the null space of a matrix H € Myxn (Zz). 


We are interested in a class of codes known as cyclic codes. Let ¢: ZK —> Z3 be a binary (n, k)-block code. Then ¢ is a cyclic 
code if for every codeword (a1, @2,... ,@n), the cyclically shifted n-tuple (an, 1, @2,..., @n—1) is also a codeword. Cyclic codes 
are particularly easy to implement on a computer using shift registers [2, 3]. 


Example 22.14. 


Consider the (6, 3)-linear codes generated by the two matrices 


1 0 0 1 0 0 
0 1 (0 i al 0) 
ee 001 nde iL al al 
1 0 0 al al 
0 1 0 0o1it1 
00 1 001 
Solution 
Messages in the first code are encoded as follows: 
(000) ++» (000000) (100) ++ (100100) 
(001) +» (001001) (101) +» (101101) 
(010) ++» (010010) (110) +» (110110) 
(011) +» (011011) (111) + (4111111). 
It is easy to see that the codewords form a cyclic code. In the second code, 3-tuples are encoded in the following manner: 
(000) ++» (000000) (100) +» (111100) 
(001) ++ (001111) (101) +» (110011) 
(010) ++» (011110) (110) +» (100010) 
(011) ++ (010001) (111) +» (101101). 


This code cannot be cyclic, since (101101) is a codeword but (011011)is not a codeword. 


Polynomial Codes 


We would like to find an easy method of obtaining cyclic linear codes. To accomplish this, we can use our knowledge of finite 
fields and polynomial rings over Z2. Any binary n-tuple can be interpreted as a polynomial in Z2[z]. Stated another way, the n- 
tuple (ao, @1,..., @,_1) corresponds to the polynomial 


f(z) =ag +ayxr+::: tei: 


where the degree of f(a) is at most n — 1. For example, the polynomial corresponding to the 5-tuple (10011) is 


1+02 +02? +122 +124 =142°? +2". 


Conversely, with any polynomial f(x) € Z)[x] with deg f(x) <n we can associate a binary n-tuple. The polynomial 
xz +2*+2* corresponds to the 5-tuple (01101). 


Let us fix a nonconstant polynomial g(x) in Z, [a] of degree n —k. We can define an (n, k)-code C in the following manner. If 
(ao,.--,@-1) is a k-tuple to be encoded, then f(x) = ap +a,z +---+a,_1x2*-! is the corresponding polynomial in Z.[x].To 
encode f(a), we multiply by g(x). The codewords in C are all those polynomials in Z2[2z] of degree less than n that are divisible 
by g(x). Codes obtained in this manner are called polynomial codes. 
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Example 22.15. 


If we let g(x) =1+.2°, we can define a (6,3)-code C as follows. To encode a 3-tuple (a9, a1, a2), we multiply the 
corresponding polynomial f(x)=aj+a,a+a,22 by 1+2°. We are defining a map ¢:Z3—>Z6 by 
@: f(x) +> g(x) f(z). It is easy to check that this map is a group homomorphism. In fact, if we regard Z3 as a vector space 
over Ze, ¢ is a linear transformation of vector spaces (see Exercise 20.5.15 Chapter 20). Let us compute the kernel of @. 
Observe that (a9, a1, @2) = (000000) exactly when 


0+02+0a7+02?+02*+02° =(1+2°)(a9 +012 +0927) 
=ag +ayx + anx” + ag? +a,2* +ag2°. 

Solution 
Since the polynomials over a field form an integral domain, ag +a;z-+a2x? must be the zero polynomial. Therefore, 
ker ¢ = {(000)} and ¢ is one-to-one. 
To calculate a generator matrix for C’, we merely need to examine the way the polynomials 1, x, and x” are encoded: 

(14+a°)-1 =1+2° 

(1+a°)¢ =ae+z4 
(1+2°)2” =a? +2". 


We obtain the code corresponding to the generator matrix G in Example 22.14. The parity-check matrix for this code is 


1001 0 0 
H=|0 100410 
001001 


Since the smallest weight of any nonzero codeword is 2, this code has the ability to detect all single errors. 


Rings of polynomials have a great deal of structure; therefore, our immediate goal is to establish a link between polynomial codes 
and ring theory. Recall that 2” —1=(a#—1)(a"1+---+a+1). The factor ring 


Ry, = Zo[e]/(e” — 1) 
can be considered to be the ring of polynomials of the form 
f(t) =ap tayt+---+a,4t? 


that satisfy the condition t’ = 1. It is an easy exercise to show that Z5 and R, are isomorphic as vector spaces. We will often 
identify elements in Zj with elements in Z[z]/(z”—1). In this manner we can interpret a linear code as a subset of 
Z[a|/(2” —1). 


The additional ring structure on polynomial codes is very powerful in describing cyclic codes. A cyclic shift of an n-tuple can be 
described by polynomial multiplication. If f(t) = ag +a,;t-+---+a,-1t” 1+ is acode polynomial in R,, then 


t f(t) = an tagt +-+++an_2t” 


is the cyclically shifted word obtained from multiplying f(t) by ¢. The following theorem gives a beautiful classification of cyclic 
codes in terms of the ideals of R,. 


Theorem 22.16. 


A linear code C' in Z is cyclic if and only if it is an ideal in Rp = Zz] /(x" —1). 


Proof 


Let C be a linear cyclic code and suppose that f(t) is in C’. Then t f(t) must also be in C’. Consequently, t* f(t) is in C for 
all kN. Since C is a linear code, any linear combination of the codewords f(t), tf(t),t? f(t),...,t” 1f(t)is also a 
codeword; therefore, for every polynomial p(t), p(t) f(¢) is in C. Hence, C is an ideal. 
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Conversely, let C be an ideal in Z2[x]/(a” +1). Suppose that f(t) =ao +ajt+---+an1t” 1 is a codeword in C. 
Then tf (¢) is a codeword in C; that is, (a1,...,@n—1, @o) is in C. 


Theorem 22.16 tells us that knowing the ideals of R,, is equivalent to knowing the linear cyclic codes in Z3. Fortunately, the ideals 
in R, are easy to describe. The natural ring homomorphism ¢: Z2[x] > R, defined by $[f(x)] = f(t) is a surjective 
homomorphism. The kernel of ¢ is the ideal generated by x” —1. By Theorem 16.34, every ideal C in R,, is of the form $(Z), 
where I is an ideal in Z.[a] that contains (2” —1). By Theorem 17.20, we know that every ideal I in Z2[2] is a principal ideal, 
since Zz is a field. Therefore, J = (g(x)) for some unique monic polynomial in Z2[x]. Since (z” —1) is contained in J, it must be 
the case that g(x) divides x” —1. Consequently, every ideal C' in R, is of the form 


C = (g(t) = {Ff (E)g(E) : F(t) € Rn and g(x) | (w" —1) in Z2[z]}. 


The unique monic polynomial of the smallest degree that generates C’ is called the minimal generator polynomial of C’. 


Example 22.17. 


If we factor x” — 1 into irreducible components, we have 
zg’ —-1=(1+2)(l+2+2°)(1+2?+2°). 
Solution 


We see that g(t) =(1+t¢+t°) generates an ideal C in Ry. This code is a (7, 4)-block code. As in Example 22.15, it is easy 
to calculate a generator matrix by examining what g(t) does to the polynomials 1, ¢, t?, and ¢?. A generator matrix for C is 


100 0 
1 10 0 
0 1 1 +0 
G=/]1 011 
0101 
0 0 1 0 
0 001 


In general, we can determine a generator matrix for an (n, k)-code C’ by the manner in which the elements t* are encoded. Let 
x” —1= g(x)h(x) in Zo[z].If g(x) =go+gia+-:++Gn-nz” * andh(x)=ho+hiz+---+hpax*, then the n x k matrix 


0) 0 0 
91 90 0 
G=]| Qn-k 9n—k-1 go 
0 Gn—-k 91 
0 0 “"* On—-k 


@ =» 0 O he ==> he 
ga|? 0 he ho 0 
hp ho 0 O 0 


We will leave the details of the proof of the following proposition as an exercise. 
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Proposition 22.18. 


Let C = (g(t)) be a cyclic code in R, and suppose that x” — 1 = g(x)h(x). Then G and H are generator and parity-check 
matrices for C’, respectively. Furthermore, \(HG = O\text{.}\ 


Example 22.19. 


In Example 22.17, 


a’ —1l=9(z)h(x) =(1+2+23)(1+a+2? +2"). 
Solution 


Therefore, a parity-check matrix for this code is 


00101121 
H={0 10141410 
10311100 
To determine the error-detecting and error-correcting capabilities of a cyclic code, we need to know something about determinants 
If a1,...,@n are elements in a field F’, then the n x n matrix 
1 1 1 
ay a2 An 
at a3 a2 
a a an 1 


is called the Vandermonde matrix. The determinant of this matrix is called the Vandermonde determinant. We will need the 
following lemma in our investigation of cyclic codes. 


Let a1,..., Qn be elements ina field F with n > 2. Then 
1 1 ae 1 
a1 a2 An 
2 2 2 
a a a 
det | 2 = (a; — @;) 
1<j<i<n 
oe One: ee rove 


In particular, if the a's are distinct, then the determinant is nonzero. 


Proof 


We will induct on n. If n = 2, then the determinant is @2—@,. Let us assume the result for »—1 and consider the 
polynomial p(x) defined by 


1 1 1 
a1 a2 An-1 xz 
2) 2 2 
p(x) = det Cai G5) On-1 ae 
n—-1 n—-1 n—-1 n—1 
ay Gr coe Ch | & 


Expanding this determinant by cofactors on the last column, we see that p(z) is a polynomial of at most degree n — 1. 
Moreover, the roots of p(a) are a),...,Qn—1, since the substitution of any one of these elements in the last column will 
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produce a column identical to the last column in the matrix. Remember that the determinant of a matrix is zero if it has two 
identical columns. Therefore, 


p(x) = (a —a1)(@— a2) +++ (@ — On) 8, 


where 
1 1 1 
ay (o%) An-1 
2 9 2 
B= (ir dep 1 2 nel 
n—-2 n—-2 n—-2 
Oy o2) On-1 


By our induction hypothesis, 


p=(-1)"" J] (@i-o). 


1<j<i<n-l 


If we let x =a, the result now follows immediately. 


The following theorem gives us an estimate on the error detection and correction capabilities for a particular generator polynomial. 


Theorem 22.21. 


Let C = (g(t)) be a cyclic code in R, and suppose that w is a primitive nth root of unity over Zz. If s consecutive powers of 
w are roots of g(a), then the minimum distance of C is at least s +1. 


Proof 
Suppose that 
gw") = g(w"*") =-+- = gu" *) =0. 
Let f(z) be some polynomial in C with s or fewer nonzero coefficients. We can assume that 
f(z) =ai2" +a;,2' +++» +0;, 2° 
be some polynomial in C’. It will suffice to show that all of the a;'s must be 0. Since 
gw") = g(w"**) =--- = gw) =0 
and g(x) divides f(x), 
f(w") 7 fe) a eee Fee) =), 
Equivalently, we have the following system of equations: 
aig (w")® +04, (W")8 +++ tay, (Wy! =0 
Qi, (art* ft ai, (wrtt je chaae +4i,, (wrtt jet —0 


Gi, (gi a a ai, (G2 yn Seals Qi, (go yi =(). 
Therefore, (a;,,@;,,.--,@:,_,) is a solution to the homogeneous system of linear equations 
(w*?)" eq + (wt )’ay +--+ +(w1)"2,_1 =0 


(Oe zo + (w" yay ate (ys, 4 = 


(w'? ieee zo+ (wt et ote eo (Gat In-1 = 0. 


GNU Free Documentation License 22.2.5 https ://math.libretexts.org/@go/page/81218 


Oibretexts: 


However, this system has a unique solution, since the determinant of the matrix 


(wo is (wt ve Peo (wis yr 
(wr ye (wt yee En. Cape 
(w pet (wt Noe ere (wis oe 


can be shown to be nonzero using Lemma 22.20 and the basic properties of determinants (Exercise). Therefore, this 
solution must be a;, = a;, =--: =a;,_, = 0. 


BCH Codes 


Some of the most important codes, discovered independently by A. Hocquenghem in 1959 and by R. C. Bose and D. V. Ray- 
Chaudhuri in 1960, are BCH codes. The European and transatlantic communication systems both use BCH codes. Information 
words to be encoded are of length 231, and a polynomial of degree 24 is used to generate the code. Since 
231424 = 255 — 2° —1, we are dealing with a (255, 231}block code. This BCH code will detect six errors and has a failure 
rate of 1 in 16 million. One advantage of BCH codes is that efficient error correction algorithms exist for them. 


The idea behind BCH codes is to choose a generator polynomial of smallest degree that has the largest error detection and error 
correction capabilities. Let d = 2r+1 for some r > 0. Suppose that w is a primitive nth root of unity over Z2, and let m;(x) be 
the minimal polynomial over Z of w*. If 


g(x) = \lem|[m, (x), mo(x),..., mo,(x)], 


then the cyclic code (g(t)) in R, is called the BCH code of length n and distance d. By Theorem 22.21, the minimum distance of 
C is at least d. 


Theorem 22.22. 


Let C = (g(t)) be a cyclic code in R,,. The following statements are equivalent. 


1. The code C is a BCH code whose minimum distance is at least d. 
2. A code polynomial f(t) is in C if and only if f(w') =0 for1 <i <d. 
3. The matrix 


i eee 

ere On gy1) (2) 
el ee ro w(—1)(3) 

1 we? wr w(r—1) (2r) 


is a parity-check matrix for C’. 


Proof 
(1) = (2). If f(t) is in C, then g(x) | f(x) in Zg[x]. Hence, fori =1,...,2r, f(w') =0 since g(w’) =0. Conversely, 


suppose that f(w*) =0 for1 <i<d. Then f(z) is divisible by each m,;(x), since m;(z) is the minimal polynomial of 
w’. Therefore, g(x) | f(x) by the definition of g(x). Consequently, f(a) is a codeword. 


(2) => (3). Let f(t)=ao+ait+-+:+a,1vt”! be in Rn. The corresponding n-tuple in Z3 is 
x = (aga, ORC Gray) eee By (2), 


dg +ajw+->++ap10" f(w) 
ao tay +--+ +An—1(w?)?t f(w”) 
Hx= é = =0 
ao + aw" Se eee eres (Ree) Kaa for) 
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exactly when f(t) is in C. Thus, H is a parity-check matrix for C’. 


(3) = (1). By (3), a code polynomial f(t) =ao+ait+---+a,1t%1 is in C exactly when f(w‘)=0 for 
i =1,...,2r. The smallest such polynomial is g(t) = \lcm|[my(E), ... , mo,(t)]. Therefore, C = (g(t)). 


Example 22.23. 


It is easy to verify that 21° —1 € Z[z] has a factorization 
oe —1 =(@+1) (2? +241)(e* +a41)(2* +27 +1)(2* +27 +27 +241), 
where each of the factors is an irreducible polynomial. Let w be a root of 1 +2 +2*. The Galois field \gf(2*) is 
{ao +ajw+aw" +a3w® :a; € Zp andl+wt+u* = O}. 
Solution 


By Example 22.8, w is a primitive 15th root of unity. The minimal polynomial of w is m;(z) =1+<2 +a*. It is easy to see 
that w* and w* are also roots of m, (x). The minimal polynomial of w® is m2 (cz) =1l+a¢+ xv?+2°+2*. Therefore, 


g(x) =m (x)mo(x) =14+a4+2%+27+28 


has roots w, w”, w*, w*. Since both mj,(x) and m»(x) divide x1°—1, the BCH code is a (15,7)code. If 
x —1=g(zx)h(ax), then h(x) =1+24+2°+2"; therefore, a parity-check matrix for this code is 


000000013101 000i21 
0 0000110100021 «+0 
0000011010001 «0 «0 
0000110100010 0 0 
0001101000210 0 0 0 
0011031000210 0 0 0 0 
01i1031000dd2100 0 0 0 0 
1103100031000 0 0 0 0 


Theorem 22.22. 


Proof. 


Example 22.23. 


This page titled 22.2: Polynomial Codes is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or 
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22.3: Reading Questions 


When is a field extension separable? 
What are the possible orders for subfields of a finite field? 
What is the structure of the non-zero elements of a finite field? 


Provide a characterization of finite fields using the concept of a splitting field. 


2B 7B :B :B 


Why is a theorem in this chapter titled “The Freshman's Dream?” 
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22.4: Exercises 


Calculate each of the following. 
1. [GF (3°) : GF(3°)| 

GF(128) : GF(16)| 

GF (625) : GF(25)| 

GF (p') : GF(p’)| 


Ds 
3 
4. 
Calculate [GF (p”) : GF (p”)], where n | m. 
What is the lattice of subfields for GF (p*°)? 
Let a be a zero of x? +27 +1 over Zo. Construct a finite field of order 8. Show that x? + 2? +1 splits in Ze (a). 


Construct a finite field of order 27. 


Prove or disprove: Q* is cyclic. 


fe 
E 
eZ 
= 
fa 


Factor each of the following polynomials in Z2[z]. 


1 1 
2 2 +o +a +2? +e +o +1 
Sop = 1 


4.0¢+e2 +e? +41 


| Prove or disprove: Z2[x]/ (x? +2 +1) 2 Zs[z]/(a? +27 +1). 
| Determine the number of cyclic codes of length n for n = 6,7, 8, 10. 


Prove that the ideal (¢+1) in R, is the code in Z} consisting of all words of even parity. 
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Construct all BCH codes of 


1. length 7. 
2. length 15. 


Prove or disprove: There exists a finite field that is algebraically closed. 


Let p be prime. Prove that the field of rational functions Z,(z) is an infinite field of characteristic p. 


Let D be an integral domain of characteristic p. Prove that (a — b)?" =a?" — bP" foralla,b«€ D. 


Show that every element in a finite field can be written as the sum of two squares. 


Let & and F be subfields of a finite field K. If F is isomorphic to F’, show that & = F’. 


LetF CECK be fields. If K is a separable extension of F’, show that K is also separable extension of LE. 


Let E be an extension of a finite field Ff’, where F’ has q elements. Let a € EF be algebraic over F' of degree n. Prove that 
F(a) has g” elements. 


Show that every finite extension of a finite field F’ is simple; that is, if F is a finite extension of a finite field F’, prove that 
there exists ana € E& such that FE = F(a). 


Show that for every n there exists an irreducible polynomial of degree n in Z,|z}. 


Prove that the Frobenius map ® : GF(p”)  GF(p”) given by ® : a++ a” is an automorphism of order n. 


= 
fa 
er 
ee 
ee 
CS 
E 
E 
~ 
= 
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Show that every element in GF(p”) can be written in the form a? for some unique a € GF (p”). 


| Let E and F be subfields of GF (p”). If |E| =p” and |F'| = p’, what is the order of EN F? 


Wilson's Theorem 


Let p be prime. Prove that (p — 1)! = —1 (mod p). 


If g(t) is the minimal generator polynomial for a cyclic code C' in R,,, prove that the constant term of g(z) is 1. 


Often it is conceivable that a burst of errors might occur during transmission, as in the case of a power surge. Such a 
momentary burst of interference might alter several consecutive bits in a codeword. Cyclic codes permit the detection of such 
error bursts. Let C’ be an (n, k)-cyclic code. Prove that any error burst up to n — k digits can be detected. 


| Prove that the rings R, and Z are isomorphic as vector spaces. 


Let C be a code in R,, that is generated by g(t). If (f(t)) is another code in R,,, show that (g(t)) C (f(€)) if and only if f(x) 
divides 9(z) in Z2[z]}. 


k 


Let C = (g(t)) bea cyclic code in R, and suppose that x” —1 = g(x)h(ax), where g(z) = go + git+---+ n-ne” and 


h(a) =ho +hiz+--- +hyx*. Define G to be the n x k matrix 


90 0 ce 0 

n 90 0 

G =i Gn-k = Yn—k-1 90 

0 9n-k 71 

0 0 eae er 
and H to be the (n—k) xn matrix 
OQ; ss 0) 0) he Seas hy 
h h 

He 0 O hy 0 O 
i ee Ie ee 0 


1. Prove that G is a generator matrix for C’. 
2. Prove that H is a parity-check matrix for C’. 
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| 3. Show that HG = 0. 
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22.5: Additional Exercises- Error Correction for BCH Codes 


BCH codes have very attractive error correction algorithms. Let C' be a BCH code in R,, and suppose that a code polynomial 
c(t) =cgtcjt+---4+ Cn_1t” ! is transmitted. Let w(t) =wotwit+-:- Wn_1t” + be the polynomial in R,, that is received. 
If errors have occurred in bits a1,...,a%, then w(t) =c(t)+e(t), where e(t) =t" +¢%+---+¢™ is the error polynomial. 
The decoder must determine the integers a; and then recover c(t) from w(t) by flipping the a;th bit. From w(t) we can compute 
w(w') = s; fori =1,..., 2r, where w is a primitive nth root of unity over Zz. We say the syndrome of w(t) is s1,..., S2r- 


Show that w(t) is a code polynomial if and only if s; = 0 for all z. 


Show that 


§; = w(w") = e(w’) =u + Ww" +... + wit 


fori =1,...,2r. The error-locator polynomial is defined to be 


s(x) = (w@+w) (a +w™)---(a+w). 


Recall the (15, 7)-block BCH code in Example 22.19. By Theorem 8.13, this code is capable of correcting two errors. Suppose 
that these errors occur in bits a and az. The error-locator polynomial is s(z) = (a +w™)(x -+w%). Show that 


8 
s(x) = v+syet (s: ak ) , 
$1 


Let w(t) =1+ ?4+¢*4+¢#24¢7+4+4t!2+4148. Determine what the originally transmitted code polynomial was. 


‘Bo «Bos: :B :B 
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22./: Sage 


You have noticed in this chapter that finite fields have a great deal of structure. We have also seen finite fields in Sage regularly as 
examples of rings and fields. Now we can combine the two, mostly using commands we already know, plus a few new ones. 


Creating Finite Fields 


By Theorem 22.6 we know that all finite fields of a given order are isomorphic and that possible orders are limited to powers of 
primes. We can use the FiniteField() command, as before, or a shorter equivalent is GF() . Optionally, we can specify 
an irreducible polynomial for the contruction of the field. We can view this polynomial as the generator of the principal ideal of a 
polynomial ring, or we can view it as a “re-writing” rule for powers of the field's generator that allow us to multiply elements and 
reformulate them as linear combinations of lesser powers. 


Absent providing an irreducible polynomial, Sage will use a Conway polynomial. You can determine these with the 
conway _polynomial() command, or just build a finite field and request the defining polynomial with the 
.polynomial() method. 


Just to be more readable, we coerce a list of coefficients into the set of polynomials (obtained with the .parent() methodona 
simple polynomial) to define a polynomial. 


Logarithms in Finite Fields 


One useful command we have not described is the .1l0g() method for elements of a finite field. Since we now know that the 
multiplicative group of nonzero elements is cyclic, we can express every element as a power of the generator. The log method 
will return that power. 


Usually we will want to use the generator as the base of a lograithm computation in a finite field. However, other bases may be 
used, wih the understanding that if the base is not a generator, then the logarithm may not exist (i.e. there may not be a solution to 
the relevant equation). 


Since we already know many Sage commands, there is not much else worth introducing before we can work profitably with finite 


fields. The exercises explore the ways we can examine and exploit the structure of finite fields in Sage. 
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22.8: Sage Exercises 


25 


Create a finite field of order 5? and then factor p(x) = z”° — x over this field. Comment on what is interesting about this 


result and why it is not a surprise. 


Corollary 22.11 says that the nonzero elements of a finite field are a cyclic group under multiplication. The generator used in 
Sage is also a generator of this multiplicative group. To see this, create a finite field of order 2”. Create two lists of the 
elements of the field: first, use the .1ist() method, then use a list comprehension to generate the proper powers of the 
generator you specified when you created the field. 


The second list should be the whole field, but will be missing zero. Create the zero element of the field (perhaps by coercing 0 
into the field) and .append() it to the list of powers. Apply the sorted() command to each list and then test the lists 
for equality. 


Subfields of a finite field are completely classified by Theorem 22.7. It is possible to create two finite fields of the correct 
orders for the supefield/subfield realtionship to hold, and to translate between one and the other. However, in this exercise we 
will create a subfield of a finite field from scratch. Since the group of nonzero elements in a finite field is cyclic, the nonzero 
elements of a subfield will form a subgroup of the cyclic group, and necessarily will be cyclic. 


Create a finite field of order 3°. Theory says there is a subfield of order 3”, since 2 |6. Determine a generator of multiplicative 
order 8 for the nonzero elements of this subfield, and construct these 8 elements. Add in the field's zero element to this list. It 
should be clear that this set of 9 elements is closed under multiplication. Absent our theorems about finite fields and cyclic 
groups, the closure under addition is not a given. Write a single statement that checks if this set is also closed under addition, 
by considering all possible sums of elements from the set. 


This problem investigates the “separableness” of Q(./3,./7). You can create this number field quickly with the 
NumberFieldTower constructor, along with the polynomials z?—3 and x?—7. Flatten the tower with the 
-absolute field() method and use the .structure() method to retrieve mappings between the tower and the 

flattened version. Name the tower \’ anduse a and Db as generators. Name the flattened version | with c asa 

generator. 


Create a nontrivial (“random”) element of | using as many powers of cC_ as possible (check the degree of | to see how 
many linearly independent powers there are). Request from Sage the minimum polynomial of your random element, thus 
ensuring the element is a root. Construct the minimum polynomial as a polynomial over \\ , the field tower, and find its 
factorization. Your factorization should have only linear factors. Each root should be an expressionin a and )b , so convert 
each root into an expression with mathematical notation involving \/3 and /7. Use one of the mappings to verify that one of 
the roots is indeed the original random element. 


Create a few more random elements, and find a factorization (in \) orin L ). Fora field to be separable, every element of 
the field should be a root of some separable polynomial. The minimal polynomial is a good polynomial to test. (Why?) Based 
on the evidence, does it appear that Q(1/3, \/7) is a separable extension? 


Exercise 22.4.21 describes the Frobenius Map, an automorphism of a finite field. If F is a finite field in Sage, then 
End(F) will create the automorphism group of F, the set of all bijective mappings between the field and itself. 
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1. Work Exercise 22.4.21to gain an understanding of how and why the Frobenius mapping is a field automorphism. (Do not 
include any of this in your answer to this question, but understand that the following will be much easier if you do this 
problem first.) 

2. For some small, but not trivial, finite fields locate the Frobenius map in the automorphism group. Small might mean 
p=2,3,5,7and3 <n < 10, with n prime versus composite. 

3. Once you have located the Frobenius map, describe the other automorphisms. In other words, with a bit of investigation, 
you should find a description of the automorphisms which will allow you to accurately predict the entire automorphism 
group for a finite field you have not already explored. (Hint: the automorphism group is a group. What if you “do the 
operation” between the Frobenius map and itself? Just what is the operation? Try using Sage's multiplicative notation with 
the elements of the automorphism group.) 

4. What is the “structure” of the automorphism group? What special status does the Frobenius map have in this group? 

5. For any field, the subfield known as the fixed field is an important construction, and will be especially important in the next 
chapter. Given an automorphism 7 of a field E, the subset, K = {b € E'| r(b) =b}, can be shown to bea subfield of E. 
It is known as the fixed field of r in E. For each automorphism of FE = GF(3°) identify the fixed field of the 
automorphism. Since we understand the structure of subfields of a finite field, it is enough to just determine the order of the 
fixed field to be able to identify the subfield precisely. 


Exercise 22.4.15 suggests that every element of a finite field may be written (expressed) as a sum of squares. This exercise 
suggests computational experiments which might help you formulate a proof for the exercise. 


1. Construct two small, but not too small, finite fields, one with p = 2 and the other with an odd prime. Repeat the following 
for each field, F’. 
2. Choose a “random” element of the field, say a € F’. Construct the sets 


{x?|z € F} {a—a?|2 € F} 


using Sage sets with the Set() constructor. (Be careful: set() is a Python command which behaves differently in 
fundamental ways.) 


3. Examine the size of the two sets and the size of their intersection( .intersection() ). Try different elements for a, 
perhaps writing a loop to try all possible values. Note that p = 2 will behave quite differently. 

4. Suppose you have an element of the intersection. (You can get one with .an_element() .) How does this lead to the 
sum of squares proposed in the exercise? 

5. Can you write a Python function that accepts a finite field whose order is a power of an odd prime and then lists each 
element as a sum of squares? 
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CHAPTER OVERVIEW 


23: Galois Theory 

A classic problem of algebra is to find the solutions of a polynomial equation. The solution to the quadratic equation was known in 
antiquity. Italian mathematicians found general solutions to the general cubic and quartic equations in the sixteenth century; 
however, attempts to solve the general fifth-degree, or quintic, polynomial were repulsed for the next three hundred years. 
Certainly, equations such as 2° —1=0 or 2° — x? —6 =O could be solved, but no solution like the quadratic formula was found 
for the general quintic, 


az’ + bz*+cx?+dz?+ex+f =0. 


Finally, at the beginning of the nineteenth century, Ruffini and Abel both found quintics that could not be solved with any formula. 
It was Galois, however, who provided the full explanation by showing which polynomials could and could not be solved by 
formulas. He discovered the connection between groups and field extensions. Galois theory demonstrates the strong 
interdependence of group and field theory, and has had far-reaching implications beyond its original purpose. 


In this chapter we will prove the Fundamental Theorem of Galois Theory. This result will be used to establish the insolvability of 
the quintic and to prove the Fundamental Theorem of Algebra. 

23.1: Field Automorphisms 

23.2: The Fundamental Theorem 

23.3: Applications 

23.4: Reading Questions 

23.5: Exercises 

23.6: References and Suggested Readings 

23.7: Sage 

23.8: Sage Exercises 
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23.1: Field Automorphisms 


Our first task is to establish a link between group theory and field theory by examining automorphisms of fields. 


Proposition 23.1. 


The set of all automorphisms of a field F' is a group under composition of functions. 


Proof 


If o and T are automorphisms of F’, then so are or and o~!. The identity is certainly an automorphism; hence, the set of 
all automorphisms of a field F' is indeed a group. 


Proposition 23.2. 


Let F be a field extension of F’. Then the set of all automorphisms of F that fix F’ elementwise is a group; that is, the set of all 
automorphisms o : # —> E such that o(a) =a for alla € F is a group. 


Proof 


We need only show that the set of automorphisms of —& that fix F’ elementwise is a subgroup of the group of all 
automorphisms of £. Let o and 7 be two automorphisms of & such that o(a) =a@ and 7(a)=a for alla € F. Then 
ot(a)=o(a)=a ando '(a) =a. Since the identity fixes every element of E, the set of automorphisms of E that 
leave elements of F' fixed is a subgroup of the entire group of automorphisms of F.. 


Let £ be a field extension of F’. We will denote the full group of automorphisms of E by \aut(£). We define the Galois group of 
F over F to be the group of automorphisms of F that fix F’ elementwise; that is, 


G(E/F) = {o € \aut(E): o(a) =a foralla€ F}. 


If f(x) is a polynomial in F[x] and £ is the splitting field of f(a) over F’, then we define the Galois group of f(z) to be 


Complex conjugation, defined by o :a+6i++a—bi, is an automorphism of the complex numbers. Since 
Solution 
o(a) =o(a+01) =a—0i =a, 


the automorphism defined by complex conjugation must be in G(C/R). 


Example 23.4. 
Consider the fields Q C Q(/5 ) C Q(/3, V5). 


Solution 


Then for a,b € Q(/5), 


o(a+bV/3) =a—bV/3 
is an automorphism of Q(V3, V5 ) leaving Q(V5 ) fixed. Similarly, 
T(a+by/5) =a—bv/5 


is an automorphism of Q(V/3, V5 ) leaving Q(1/3 ) fixed. The automorphism pp = o7 moves both /3 and V5. It will soon be 
clear that {\identity,o,7, w} is the Galois group of Q(/3, V5) over Q. The following table shows that this group is 
isomorphic to Zz x Zz. 
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\identity o F m 
\identity | \identity o a bb 
o o \identity Lb i 
T T m \identity o 
m m F o \identity 


We may also regard the field Q(/3, v5 ) as a vector space over Q that has basis {1, 3, V5, V/15 }. It is no coincidence that 
|IG(Q(v3, v5 )/Q)| = [Q(v3, V5) : Q)] =4. 


Proposition 23.5. 


Let E be a field extension of F and f(a) be a polynomial in F'[x]. Then any automorphism in G(E/F’) defines a permutation 
of the roots of f(x) that lie in E. 
Proof 
Let 
f(x) =aq +ayz +a9x7 +--+ +a,2" 
and suppose that a € E isa zero of f(x). Then for 0 € G(E/F), 
0 =a(0) 
=o(f(a)) 
=a(a9+aa ayy My eet ee +Ana”) 
= ao +aj0(a) +a2[o(a)]? +--+ +an[o(a)]”; 


therefore, o(a@) is also a zero of f(z). 


Let & be an algebraic extension of a field F. Two elements a, 8 € E are conjugate over F' if they have the same minimal 
polynomial. For example, in the field Q(./2 ) the elements ./2 and —./2 are conjugate over Q since they are both roots of the 
irreducible polynomial x? — 2. 


A converse of the last proposition exists. The proof follows directly from Lemma 21.32. 


Proposition 23.6. 


If a and 6 are conjugate over F’, there exists an isomorphism o : F'(a) — F(f) such that o is the identity when restricted to 
F, 


Let f(z) be a polynomial in F'|z] and suppose that E is the splitting field for f(x) over F’. If f(x) has no repeated roots, then 
|G(E/F)| =[E: F). 


Proof 


We will use mathematical induction on [E£: F']. If [EZ : F] =1, then E = F' and there is nothing to show. If [EZ : F'] >1, 
let f(x) =p(x)q(x), where p(x) is irreducible of degree d. We may assume that d > 1; otherwise, f(x) splits over F’ 
and [E': F] =1. Let a bea root of p(x). If 6: F(a) > E is any injective homomorphism, then ¢(a@) = # is a root of 
p(x), and @: F(a) — F() isa field automorphism. Since f(x) has no repeated roots, p(z) has exactly d roots 6 € LE. 
By Proposition 23.5 there are exactly d isomorphisms ¢: F(a) — F(@;) that fix F', one for each root 61,..., 8a of 
p(«) (see Figure 23.8). 
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| | 


¢ 
F(a) ——> F(§) 


| | 


identity 


F —> 


Figure 23.8. 


Since E is a splitting field of f(a) over F, it is also a splitting field over F(a). Similarly, FE is a splitting field of f(x) 
over F'(8). Since [Z: F(a)] =[E: F]/d, induction shows that each of the d isomorphisms ¢ has exactly [EZ’: F'|/d 
extensions, ~: & — E, and we have constructed [E': F] isomorphisms that fix F’. Finally, suppose that o is any 
automorphism fixing F’. Then o restricted to F(a) is ¢ for some ¢: F(a) > F(8). 


Corollary 23.9. 


Let F be a finite field with a finite extension E such that |E': F] =k. Then G(E/F) is cyclic of order k. 


Proof 


Let p be the characteristic of EF and F’ and assume that the orders of & and F are p™ and p”, respectively. Then nk = m. 
We can also assume that E is the splitting field of x?” —x over a subfield of order p. Therefore, E must also be the 
splitting field of 2?" —z over F. Applying Theorem 23.7, we find that |G(E/ F)| =k. 


To prove that G(E/F) is cyclic, we must find a generator for G(E/F). Let 0: E — E be defined by o(a) =a?". We 
claim that o is the element in G(E/F’) that we are seeking. We first need to show that o is in \aut(#). If a and are in 
E, 

o(a +B) =(a +B)" =a" +B” =o(a) +o(68) 
by Lemma 22.3 Also, it is easy to show that o(a6) =o(a)o(8). Since o is a nonzero homomorphism of fields, it must 
be injective. It must also be onto, since E is a finite field. We know that o must be in G(E/F), since F is the splitting 


field of x?" — x over the base field of order p. This means that o leaves every element in F' fixed. Finally, we must show 
that the order of o is k. By Theorem 23.7% we know that 


m 


o*(a) =a?" =o?" =a 


is the identity of G(Z/F’). However, o” cannot be the identity for 1 <r <k; otherwise, x?” —x would have p™ roots, 
which is impossible. 


Example 23.10. 


We can now confirm that the Galois group of Q(4/3, /5 ) over Q in Example 23.4 is indeed isomorphic to Zz x Zz. 


Solution 
Certainly the group H ={\identity,o,7,u} is a subgroup of G(Q(V/3,V/5)/Q); however, H must be all of 
G(Q(V3, V5 )/Q), since 


|Z] =[Q(v3, V5): Q = |GQ(v3, v5 )/Q| =4. 


Example 23.11. 


Let us compute the Galois group of 
f(z) =2t +e +2? +241 


over Q. 
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Solution 
We know that f(z) is irreducible by Exercise 17.5.20in Chapter 17. Furthermore, since (x —1) f(x) = 2° —1, we can use 
DeMoivre's Theorem to determine that the roots of f(z) are w’, where i =1,...,4 and 
w = cos(27/5) +4 sin(27/5). 

Hence, the splitting field of f(x) must be Q(w). We can define automorphisms o; of Q(w) by o;(w) =w' fori =1,...,4. It 
is easy to check that these are indeed distinct automorphisms in G(Q(w)/Q). Since 

[Q(w) : A = |G(Q@)/Q)| =4, 
the o;'s must be all of G(Q(w)/Q). Therefore, G(Q(w)/Q) & Z,4 since w is a generator for the Galois group. 


Separable Extensions 


Many of the results that we have just proven depend on the fact that a polynomial f(x) in F'[a] has no repeated roots in its splitting 
field. It is evident that we need to know exactly when a polynomial factors into distinct linear factors in its splitting field. Let F be 
the splitting field of a polynomial f(x) in F'[a]. Suppose that f(z) factors over E as 


Tr 


f(x) = (@ —a1)™ (e — a2)” «+ (@ — a)” =] ][(e — a4)”. 


i=1 


We define the multiplicity of a root a; of f(x) to be n;. A root with multiplicity 1 is called a simple root. Recall that a polynomial 
f(x) € F[z] of degree n is separable if it has n distinct roots in its splitting field Z. Equivalently, f(a) is separable if it factors 
into distinct linear factors over E[x]. An extension E of F is a separable extension of F' if every element in E is the root of a 
separable polynomial in F'[a]. Also recall that f(a) is separable if and only if gcd(f(x), f’(x)) = 1 (Lemma 22.5). 


Proposition 23.12. 


Let f(a) be an irreducible polynomial over F'. If the characteristic of F is 0, then f(a) is separable. If the characteristic of F 
is p and f(x) # 9(z”) for some g(x) in F [x], then f(a) is also separable. 


Proof 


First assume that \chrF' = 0. Since deg f’(x) < deg f(x) and f(z) is irreducible, the only way gcd(f(x), f’(z)) £1 is 
if f’(z) is the zero polynomial; however, this is impossible in a field of characteristic zero. If \chrF =p, then f’(x) can 
be the zero polynomial if every coefficient of f’(x) is a multiple of p. This can happen only if we have a polynomial of the 
form f(x) =a9 +412? +agz7? +---+ a2". 


Certainly extensions of a field F’ of the form F(a) are some of the easiest to study and understand. Given a field extension E of 
F,, the obvious question to ask is when it is possible to find an element a € FE such that EF = F(a). In this case, @ is called a 
primitive element. We already know that primitive elements exist for certain extensions. For example, 


QA v3, V5) =QA V3 + V5) 
and 
Q(W5, V5 1%) = QW5 2). 


Corollary 22.12 tells us that there exists a primitive element for any finite extension of a finite field. The next theorem tells us that 
we can often find a primitive element. 


Theorem 23.13. Primitive Element Theorem. 


Let E be a finite separable extension of a field F’. Then there exists ana € E such that E = F(a). 


Proof 


We already know that there is no problem if F’ is a finite field. Suppose that F is a finite extension of an infinite field. We 
will prove the result for F'(a, 8). The general case easily follows when we use mathematical induction. Let f(x) and g(x) 
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be the minimal polynomials of a and f, respectively. Let K be the field in which both f(x) and g(x) split. Suppose that 
f(x) has zeros @=a1,...,Qp in K and g(x) has zeros 8 = 61,..., 8m in K. All of these zeros have multiplicity 1, 
since F is separable over F’. Since F is infinite, we can find an a in F' such that 


aj; —a 
B-B; 
for all i and j with 7 £1. Therefore, a(8—8;) #a;—a. Lety=a+a8. Then 


a4 


y=ataB 4a; +a8;; 


hence, y—a8; Aa; for all 1,7 with 7 #1. Define h(x) € F(y)[x] by h(x) =f(y—az). Then h(8) = f(a) =0. 

However, h(8;) #0 for 741. Hence, h(x) and g(x) have a single common factor in F'(y)[«]; that is, the minimal 
polynomial of 6 over F'(y) must be linear, since § is the only zero common to both g(x) and h(x). So 6 € F(y) and 
a=7y-—a8 isin F(y). Hence, F(a, B) = F(y).. 


This page titled 23.1: Field Automorphisms is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or 


curated by Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the 
LibreTexts platform; a detailed edit history is available upon request. 
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23.2: The Fundamental Theorem 


The goal of this section is to prove the Fundamental Theorem of Galois Theory. This theorem explains the connection between the 
subgroups of G(£/F) and the intermediate fields between E and F’. 


Proposition 23.14. 


Let {o; :4 € I} be a collection of automorphisms of a field F’. Then 
Fy, = {a € F : o;(a) =a for all oi} 
is a subfield of F. 
Proof 
Let o;(a) =a and o;(b) =b. Then 


oi(atb) =0;(a) +0;(b) =axtb 


and 
0; (ab) =0;(a)o;(b) = ab. 


Ifa 40, then o;(a 1) = [o;(a)}-1 =a? . Finally, o;(0) =0 and o;(1) =1 since o; is an automorphism. 


Corollary 23.15. 


Let F be a field and let G be a subgroup of \aut(F’). Then 
Fg ={a € F:o(a) =a forall o € G} 
is a subfield of F’. 


The subfield F,,; of F is called the fixed field of {0;}. The field fixed by a subgroup G of \aut(F’) will be denoted by Fg. 


Example 23.16. 


Let o : Q(/3, V5) > Q(/3, 5) be the automorphism that maps »/3 to —/3. 


Solution 
Then Q(1/5 ) is the subfield of Q(4/3, /5 ) left fixed by o. 


Proposition 23.17. 


Let E be a splitting field over F of a separable polynomial. Then Egg/r) = F. 


Proof 


Let G=G(E/F). Clearly, F CEg CE. Also, E must be a splitting field of Eg and G(E/F) =G(E/Ec). By 
Theorem 23.7, 


IG| =|[E£: Eg] =|E: FI. 
Therefore, [Hg : F] =1. Consequently, Eg = F. 


A large number of mathematicians first learned Galois theory from Emil Artin's monograph on the subject [1]. The very clever 
proof of the following lemma is due to Artin. 
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Lemma 23.18. 


Let G be a finite group of automorphisms of E and let F = Eg. Then |E: F] < |G. 


Proof 


Let |G| =n. We must show that any set of n+1 elements a1,...,@n+41 in E is linearly dependent over F’; that is, we 
need to find elements a; € F’, not all zero, such that 


a1 Oy +0902 +++++4n41An41 = 0. 


Suppose that 0; = \identity, o2,..., 0, are the automorphisms in G. The homogeneous system of linear equations 
o1(1)21 +.01(a2)a2+---4 bO1(Ont1)tnt1 =0 
02(a1)21 +02(a2)x2 ot it + 02(An 1)&n, i =—0 
On(O1) 21 + On (O12) 22 ++*> + On (Ons )en41 =0 


has more unknowns than equations. From linear algebra we know that this system has a nontrivial solution, say x; = a; for 
4=1,2,...,n+1. Since a; is the identity, the first equation translates to 


ajay +a9Q2 +--+ +4n41Qn411 = 0. 
The problem is that some of the a;'s may be in F but not in F’. We must show that this is impossible. 


Suppose that at least one of the a;'s is in & but not in F’. By rearranging the a;'s we may assume that a; is nonzero. Since 
any nonzero multiple of a solution is also a solution, we can also assume that a; = 1. Of all possible solutions fitting this 
description, we choose the one with the smallest number of nonzero terms. Again, by rearranging a2,...,Qn41 if 
necessary, we can assume that ay is in & but not in F’. Since F is the subfield of F that is fixed elementwise by G, there 
exists ao; in G such that o;(a2) # a2 . Applying o; to each equation in the system, we end up with the same homogeneous 


system, since G is a group. Therefore, 2; =0;(a1) =1, £2 =o; (a2), ..., Ln41 =Oi(An41) is also a solution of the 
original system. We know that a linear combination of two solutions of a homogeneous system is also a solution; 
consequently, 

ry = 1-1=0 


L2 = ag —0;(a2) 


Intl = An41 — Oj (an41) 


must be another solution of the system. This is a nontrivial solution because o;(a2) # a2, and has fewer nonzero entries 
than our original solution. This is a contradiction, since the number of nonzero solutions to our original solution was 
assumed to be minimal. We can therefore conclude that a1,...,@n41€ F. 


Let & be an algebraic extension of F’. If every irreducible polynomial in F[a] with a root in & has all of its roots in EF, then E is 
called a normal extension of F’; that is, every irreducible polynomial in F'[x] containing a root in FE is the product of linear factors 
in E[z]. 


Theorem 23.19. 


Let E be a field extension of F’. Then the following statements are equivalent. 


1. E is a finite, normal, separable extension of F’. 
2. E is a splitting field over F of a separable polynomial. 
3. F = Eg for some finite group G of automorphisms of E. 


Proof 


(1) => (2). Let £ be a finite, normal, separable extension of F’. By the Primitive Element Theorem, we can find an a in & 
such that # = F(a). Let f(a) be the minimal polynomial of a over F’. The field & must contain all of the roots of f(z) 
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since it is a normal extension £’; hence, F is a splitting field for f(x). 


(2) = (3). Let E be the splitting field over F’ of a separable polynomial. By Proposition 23.17, Eg(g/r) =F’. Since 
|G(E/F)| =[E: F, this is a finite group. 


(3) = (1). Let F = Eg for some finite group of automorphisms G of E. Since [E': F'] <|G|, E is a finite extension of 
F’. To show that £ is a finite, normal extension of F’, let f(a) € F'[x] be an irreducible monic polynomial that has a root a 
in £. We must show that f(a) is the product of distinct linear factors in E[z]. By Proposition 23.5, automorphisms in G 
permute the roots of f(x) lying in EF. Hence, if we let G act on a, we can obtain distinct roots a1 = a@,a2,...,Qn in LE. 
Let g(x) =[[j-1 (x —ai) . Then g(z) is separable over F and g(a) = 0. Any automorphism o in G permutes the factors 
of g(x) since it permutes these roots; hence, when o acts on g(x), it must fix the coefficients of g(a). Therefore, the 
coefficients of g(a) must be in F’. Since deg g(x) < deg f(x) and f(z) is the minimal polynomial of a, f(x) = g(x) . 


Corollary 23.20. 


Let K bea field extension of F such that F = Kg for some finite group of automorphisms G of K. ThenG=G(K/F). 


Proof 


Since F = Kg, G isa subgroup of G(K/F’). Hence, 
[K: F] <|G| <|G(K/F)| =[K: F]. 


It follows that G = G(K/F), since they must have the same order. 


Before we determine the exact correspondence between field extensions and automorphisms of fields, let us return to a familiar 
example. 


In Example 23.4 we examined the automorphisms of Q(1/3, V5 ) fixing Q. 


Solution 


Figure 23.22 compares the lattice of field extensions of Q with the lattice of subgroups of G(Q(/3, V5 )/Q). The 
Fundamental Theorem of Galois Theory tells us what the relationship is between the two lattices. 


{id, 0,7, 4} 


Q(v3, v5) 
ZIN JIN 
Q(v3) Qv5) Q(v15) 


{id,o} {id,r} {id, u} 


NTA ONT? 


{id} 
Figure 23.22: G(Q(/3, V5 )/Q) 


We are now ready to state and prove the Fundamental Theorem of Galois Theory. 


Theorem 23.23. Fundamental Theorem of Galois Theory. 


Let F be a finite field or a field of characteristic zero. If E is a finite normal extension of F' with Galois group G(E/ F), then 
the following statements are true. 


1. The map K +> G(E/K) is a bijection of subfields K of E containing F' with the subgroups of G(E'/ F). 
2.IfF CK CE, then 


[E: K] =|G(E/K)| and [K : F| =|G(E/F): G(E/K)]. 
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3.F CK CLCE ifand only if {\identity} C G(E/L) C G(E/K) CG(E/F) . 
4. K is a normal extension of F if and only if G(E/K) is a normal subgroup of G(E’/ F’). In this case 


G(K/F) 2 G(E/F)/G(E/K). 


Proof 


(1) Suppose that G(E/K) = G(E/L)=G . Both K and L are fixed fields of G; hence, K = L and the map defined by 
K+ G(E/K) is one-to-one. To show that the map is onto, let G be a subgroup of G(£/F'’) and K be the field fixed by 
G. Then F CK CE; consequently, F is a normal extension of K. Thus, G(E/K) =G and the map K++ G(E/K) is 
a bijection. 


(2) By Theorem Theorem 23.7, |G(£/K)| =|E: K]; therefore, 

|G(E/F)| =[G(E/F) : GE/K)|-|G(E/K)| =[£: F] =|E: K][K: F). 
Thus, [K: F] =[G(£/F): G(E/K)] . 
Statement (3) is illustrated in Figure 23.24. We leave the proof of this property as an exercise. 


(4) This part takes a little more work. Let K be a normal extension of F’. If o is in G(E/F') and is in G(E'/K), we need 
to show that 0 'ro is in G(E/K); that is, we need to show that o-'to(a) =a for all a € K. Suppose that f(z) is the 
minimal polynomial of a over F’. Then o(a@) is also a root of f(x) lying in K, since K is a normal extension of F’. 


Hence, T(a(a)) =a(a) ora !to(a) =a. 


Conversely, let G(E’/K) be a normal subgroup of G(E/F). We need to show that F = Kex/pr . Let tT € G(E/K). For 
allo € G(E/F) there exists a7 € G(E#/K) such that ro = o7 . Consequently, for alla € K 
T(a(a)) =o(7(a)) = o(a); 


hence, o(@) must be in the fixed field of G(E’/K). Let o be the restriction of o to K. Then @ is an automorphism of 
fixing F’, since o(a) € K forall a € K; hence, o € G(K/F). Next, we will show that the fixed field of G(K/F) is F. 
Let 6 be an element in K that is fixed by all automorphisms in G(K/F). In particular, o(@) = 8 for all o € G(E/F). 
Therefore, 6 belongs to the fixed field F of G(E/F). 


Finally, we must show that when K is a normal extension of F’, 
G(K/F) = G(E/F)/G(£/K). 


Foro € G(E/F), let ox be the automorphism of K obtained by restricting o to K. Since K is a normal extension, the 
argument in the preceding paragraph shows that ox € G(K/F) . Consequently, we have a map ¢: G(E/F') > G(K/F) 
defined by o ++ ox. This map is a group homomorphism since 


$(oT) = (07) Kk =oKTK = 9(0)9(7). 


The kernel of ¢ is G(E// K). By (2), 
|G(B/F)|/|G(B/K)| =|K: F] = |G(K/F)]. 
Hence, the image of ¢ is G(K/F’) and ¢ is onto. Applying the First Isomorphism Theorem, we have 
G(K/F) = G(E/F)/G(E/K). 


E—+ {id} 
| 

L ——+ G(E/L) 
| 

K ——> G(E/K) 

| | 


F ——+ G(E/F) 
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Figure 23.24: Subgroups of G(£/F’) and subfields of E 


Example 23.23. 


In this example we will illustrate the Fundamental Theorem of Galois Theory by determining the lattice of subgroups of the 
Galois group of f(z) =2*—2. We will compare this lattice to the lattice of field extensions of Q that are contained in the 
splitting field of xt — 2. The splitting field of f(z) is Q(/2, 1). To see this, notice that f(a) factors as (x? + /2)(x? — V2); 
hence, the roots of f(a) are +V/2 and +W2i. 


Solution 
We first adjoin the root /2 to Q and then adjoin the root i of z?+1 to Q(v2). The splitting field of f(x) is then 
Q(v2 )(é) = Q(V2, 4). 
Since [Q(./2 ) : Q] =4 and is not in Q(,/2 ), it must be the case that [Q(./2, 7) : Q(W/2 )] =2. Hence, [Q(/2,7): Q =8. 
The set 

{1, V2, (V2), (W2)*, 4, #672, (V2), (V2) 
is a basis of Q(+/2, 7) over Q. The lattice of field extensions of Q contained in Q(/2, 4) is illustrated in Figure 23.26(a). 
The Galois group G of f(x) must be of order 8. Let o be the automorphism defined by o(./2 ) =iv/2 and o(i) =i, and rT be 
the automorphism defined by complex conjugation; that is, 7(¢) = —t. Then G has an element of order 4 and an element of 
order 2. It is easy to verify by direct computation that the elements of G are {\identity, 0, 0?, 03,7, 07,077, o37}and that 


the relations 7? = \identity, o4 = \identity, and tov =o! are satisfied; hence, G must be isomorphic to D4. The lattice 
of subgroups of G is illustrated in Figure 23.26(b). 


D 


= 


{id, 07, 7, 0? rid, 0, 0”, a tid, o?, or, 3 T} 


a 


{id, 7} {id, 077} {id, 07} {id, or} {id, 037} 


{id} (b) 
Figure 23.26: Galois group of 4 — 2 


Historical Note 

Solutions for the cubic and quartic equations were discovered in the 1500s. Attempts to find solutions for the quintic equations 
puzzled some of history's best mathematicians. In 1798, P. Ruffini submitted a paper that claimed no such solution could be found; 
however, the paper was not well received. In 1826, Niels Henrik Abel (1802-1829) finally offered the first correct proof that 
quintics are not always solvable by radicals. 
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Abel inspired the work of Evariste Galois. Born in 1811, Galois began to display extraordinary mathematical talent at the age of 14. 
He applied for entrance to the Ecole Polytechnique several times; however, he had great difficulty meeting the formal entrance 
requirements, and the examiners failed to recognize his mathematical genius. He was finally accepted at the Ecole Normale in 
1829. 


Galois worked to develop a theory of solvability for polynomials. In 1829, at the age of 17, Galois presented two papers on the 
solution of algebraic equations to the Académie des Sciences de Paris. These papers were sent to Cauchy, who subsequently lost 
them. A third paper was submitted to Fourier, who died before he could read the paper. Another paper was presented, but was not 
published until 1846. 


Galois' democratic sympathies led him into the Revolution of 1830. He was expelled from school and sent to prison for his part in 
the turmoil. After his release in 1832, he was drawn into a duel possibly over a love affair. Certain that he would be killed, he spent 
the evening before his death outlining his work and his basic ideas for research in a long letter to his friend Chevalier. He was 
indeed dead the next day, at the age of 20. 
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23.3: Applications 
Solvability by Radicals 


Throughout this section we shall assume that all fields have characteristic zero to ensure that irreducible polynomials do not have 
multiple roots. The immediate goal of this section is to determine when the roots of a polynomial f(z) can be computed with a 
finite number of operations on the coefficients of f (x). The allowable operations are addition, subtraction, multiplication, division, 
and the extraction of nth roots. Certainly the solution to the quadratic equation, ax” + ba +c =0, illustrates this process: 


—b+,/b? —4ac 
2a : 


The only one of these operations that might demand a larger field is the taking of nth roots. We are led to the following definition. 


bo 


An extension field F of a field F’ is an extension by radicals if there exists a chain of subfields 


F=RCHhCHhc::-CKR=E 


such fori = 1,2,...,r, we have F, = Fj_1(a;) and a,” € F;_1 for some positive integer n;. A polynomial f(z) is solvable by 
radicals over F if the splitting field K of f(x) over F is contained in an extension of F' by radicals. Our goal is to arrive at criteria 
that will tell us whether or not a polynomial f(z) is solvable by radicals by examining the Galois group f(z). 


The easiest polynomial to solve by radicals is one of the form x” — a. As we discussed in Chapter 4, the roots of x” — 1 are called 
the nth roots of unity. These roots are a finite subgroup of the splitting field of z" — 1. By Corollary 22.11, the nth roots of unity 
form a cyclic group. Any generator of this group is called a primitive nth root of unity. 


Example 23.27. 


nm 


The polynomial x” — 1 is solvable by radicals over Q. The roots of this polynomial are 1, w,w?,... ,w”~!, where 


w=cos{| — }+7sIn{| — }. 
n n 


We shall prove that a polynomial is solvable by radicals if its Galois group is solvable. Recall that a subnormal series of a group G 
is a finite sequence of subgroups 


Solution 


The splitting field of z” —1 over Q is Q(w). 


G=H, > An_-1>:::D Ay > Hy ={e}, 


where H; is normal in H;,;. A group G is solvable if it has a subnormal series {H;} such that all of the factor groups Hj.; /H; 
are abelian. For example, if we examine the series {\identity} C A3 C $3, we see that S3 is solvable. On the other hand, Ss is 
not solvable, by Theorem 10.11. 


Lemma 23.28. 


Let F be a field of characteristic zero and E be the splitting field of x” —a over F with a € F. Then G(E/F) is a solvable 


group. 

Proof 
The roots of x” —a are {/a,w/a,... oo </a, where w is a primitive nth root of unity. Suppose that F’ contains all of 
its nth roots of unity. If ¢ is one of the roots of x” —a, then distinct roots of x"—a are ¢,w(,...,w” !¢, and 


E=F(¢). Since G(£/F) permutes the roots z” —a, the elements in G(Z’/F’) must be determined by their action on 
these roots. Let o and 7 be in G(E/F) and suppose that o(¢) =w'¢ and 7(¢) =u¢. If F contains the roots of unity, 
then 


o7(6) = a(wie) =wlo(¢) =witi( =wir(d) = r(w'¢) = 7o(¢). 
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Therefore, ot = To and G(E/F) is abelian, and G(E/F’) must be solvable. 


Now suppose that F’ does not contain a primitive nth root of unity. Let w be a generator of the cyclic group of the nth roots 
of unity. Let a be a zero of z” —a. Since a and wa are both in the splitting field of 2” —a, w= (wa)/qa is also in E. Let 
K=F(w). Then F CK CE. Since K is the splitting field of 2” —1, K is a normal extension of F’. Therefore, any 
automorphism o in G(F'(w)/F) is determined by o(w). It must be the case that o(w) =w" for some integer i since all of 
the zeros of ” — 1 are powers of w. If T(w) =w! isin G(F'(w)/F), then 


oT(w) = o(u’) = [o(w)}? =w = [7(w)]* = T(w’) =To(w). 


Therefore, G(F'(w)/F’) is abelian. By the Fundamental Theorem of Galois Theory the series 
{\identity} C G(E/F(w)) C G(E/F) 

is anormal series. By our previous argument, G(E’/ F'(w)) is abelian. Since 
G(E/F)/G(E/F (w)) ~ G(F(w)/F) 

is also abelian, G(E’/F) is solvable. 


Let F be a field of characteristic zero and let 


F=hFR CR CHhc:::CKh=E 


a radical extension of F’. Then there exists a normal radical extension 


F=kj) CK, CKoc:::-CK,=K 


such that K that contains EF and K; is a normal extension of K;_,. 


Proof 


Since F is a radical extension of F’, there exists a chain of subfields 


F=hFRCKCHhc:::Ch=E 


such fori =1,2,...,7r, we have F; = F_1(a;) and a," € F,_; for some positive integer n;. We will build a normal 
radical extension of F,, 


F=kj)C Ki CKocC:::-CK,=K 


such that K DE. Define K, for be the splitting field of x"!—aj'. The roots of this polynomial are 


1, OW, a1w",...,a,wW™" +, where w is a primitive n;th root of unity. If F contains all of its n; roots of unity, then 
Ky, = F(a). On the other hand, suppose that F’ does not contain a primitive n th root of unity. If 6 is a root of 
z™ —a‘y!, then all of the roots of "! —aj' must be B,w8,...,w"!~',where w is a primitive njth root of unity. In this 


case, K, = F'(wf). Thus, Ky is a normal radical extension of F' containing F). Continuing in this manner, we obtain 


F=kj)C Ki CKoc::-CK,=K 


such that A; is a normal extension of K;_; and K; > F; fori =1,2,...,r. 


We will now prove the main theorem about solvability by radicals. 


Theorem 23.30. 


Let f(z) be in F [x], where \chrF' = 0. If f(x) is solvable by radicals, then the Galois group of f(a) over F is solvable. 


Proof 


Since f(x) is solvable by radicals there exists an extension & of F by radicals F=FPy) CPF, C---CF,=E. By 
Lemma 23.29 we can assume that F is a splitting field f(x) and F; is normal over F;_1. By the Fundamental Theorem of 
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Galois Theory, G(E/F;) is a normal subgroup of G(E/F;_1). Therefore, we have a subnormal series of subgroups of 
G(E/F): 


{\identity} C G(E/F,41) C--: C G(E/F,) C G(E/F). 
Again by the Fundamental Theorem of Galois Theory, we know that 
G(E/Fi1)/G(E/F) = G(R/F..). 
By Lemma 23.28 G(£;,/F;_1) is solvable; hence, G(E/ F’)) is also solvable. 


The converse of Theorem 23.30is also true. For a proof, see any of the references at the end of this chapter. 


Insolvability of the Quintic 


We are now in a position to find a fifth-degree polynomial that is not solvable by radicals. We merely need to find a polynomial 
whose Galois group is S;. We begin by proving a lemma. 


If p is prime, then any subgroup of S, that contains a transposition and a cycle of length p must be all of Sp. 


Proof 


Let G be a subgroup of S, that contains a transposition o and 7 a cycle of length p. We may assume that o = (12). The 
order of 7 is p and 7” must be a cycle of length p for 1<n<p. Therefore, we may assume that 
p=” =(1,2,%3,...,%)) for some n, where 1<n<p (see Exercise 5.4.13 in Chapter 5). Noting that 
(U2) tae tp — tare tp ad (2 ge i) (2223, ee — ap), we can obra, call the 
transpositions of the form (1n) for 1<m< yp. However, these transpositions generate all transpositions in S,, since 
(1 3)(17)(1 7) = (239). The transpositions generate S,,. 


a) =a° —6x° 277-3 


ao}. ft 


Figure 23.32.The graph of f(z) = 2° —6a° —27z —3 


Example 23.33. 


We will show that f(x) =a° —6x? —27x2 —3 € Q|z] is not solvable. We claim that the Galois group of f(z) over Q is Ss. 


Solution 
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By Eisenstein's Criterion, f(a) is irreducible and, therefore, must be separable. The derivative of f(x) is 
f'(x) =5a* —18x7 —27; hence, setting f’(x) = 0 and solving, we find that the only real roots of f’(a) are 


eee 6V6+9 
=| 


Therefore, f(a) can have at most one maximum and one minimum. It is easy to show that f(z) changes sign between —3 and 
—2, between —2 and 0, and once again between 0 and 4 (Figure 23.32). Therefore, f(a) has exactly three distinct real roots. 
The remaining two roots of f(x) must be complex conjugates. Let K be the splitting field of f(x). Since f(a) has five distinct 
roots in K and every automorphism of K fixing Q is determined by the way it permutes the roots of f(x), we know that 
G(K/Q) is a subgroup of S5. Since f is irreducible, there is an element in o € G(A/Q) such that o(a) =6 for two roots a 
and b of f(a). The automorphism of C that takes a+ bi +» a—bi leaves the real roots fixed and interchanges the complex 
roots; consequently, G(A’/Q) contains a transposition. If a is one of the real roots of f(a), then [Q(a) : Q| =5 by Exercise 
21.5.28 Since Q(a) is a subfield of K, it must be the case that [AK : Q| is divisible by 5. Since [K : Q] =|G(K/Q)| and 
G(K/Q) C Ss, we know that G(/Q) contains a cycle of length 5. By Lemma 23.31, Ss is generated by a transposition and 
an element of order 5; therefore, G(#/Q) must be all of Ss. By Theorem 10.11, Ss is not solvable. Consequently, f (zx) 
cannot be solved by radicals. 


The Fundamental Theorem of Algebra 


It seems fitting that the last theorem that we will state and prove is the Fundamental Theorem of Algebra. This theorem was first 
proven by Gauss in his doctoral thesis. Prior to Gauss's proof, mathematicians suspected that there might exist polynomials over the 
real and complex numbers having no solutions. The Fundamental Theorem of Algebra states that every polynomial over the 
complex numbers factors into distinct linear factors. 


Theorem 23.34. Fundamental Theorem of Algebra. 


The field of complex numbers is algebraically closed; that is, every polynomial in C[x] has a root in C. 


Proof 


Suppose that F& is a proper finite field extension of the complex numbers. Since any finite extension of a field of 
characteristic zero is a simple extension, there exists an a € # such that H =C(a) with a@ the root of an irreducible 
polynomial f(z) in C[a]. The splitting field ZL of f(x) is a finite normal separable extension of C that contains EZ. We 
must show that it is impossible for LZ to be a proper extension of C. 


Suppose that L is a proper extension of C. Since L is the splitting field of f(z) =(z?+1) over R, L is a finite normal 
separable extension of R. Let K be the fixed field of a Sylow 2-subgroup G of G(Z/R). Then LD KDR and 
|G(L/K)| =[L: K]. Since [L: R] =[L: K][K:R], we know that [K:R] must be odd. Consequently, kK =R(f) 
with 8 having a minimal polynomial f(x) of odd degree. Therefore, K = R. 


We now know that G(Z/R) must be a 2-group. It follows that G(L/C) is a 2-group. We have assumed that L # C; 
therefore, |G(L/C)| > 2. By the first Sylow Theorem and the Fundamental Theorem of Galois Theory, there exists a 
subgroup G of G(L/C) of index 2 and a field EZ fixed elementwise by G. Then [E': C] = 2 and there exists an element 
1 € E with minimal polynomial x? + bz +c in C[z]. This polynomial has roots (—b + \/b? — 4c )/2 that are in C, since 
b* —4c is in C. This is impossible; hence, L = C. 


Although our proof was strictly algebraic, we were forced to rely on results from calculus. It is necessary to assume the 
completeness axiom from analysis to show that every polynomial of odd degree has a real root and that every positive real number 
has a square root. It seems that there is no possible way to avoid this difficulty and formulate a purely algebraic argument. It is 
somewhat amazing that there are several elegant proofs of the Fundamental Theorem of Algebra that use complex analysis. It is 
also interesting to note that we can obtain a proof of such an important theorem from two very different fields of mathematics. 


This page titled 23.3: Applications is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or curated by 
Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the LibreTexts 


platform; a detailed edit history is available upon request. 


GNU Free Documentation License 23.3.4 https ://math.libretexts.org/@go/page/81228 


Oibreexts: 


23.4: Reading Questions 


What is the Galois group of a field extension? 
When are two elements of a field extension conjugate? (In other words, what is the definition?) 


Summarize the nature and importance of the Fundamental Theorem of Galois Theory. Capture the essence of the result without 
getting bogged down in too many details. 


Why are “solvable” groups so named? Paraphrasing the relevant theorem would be a good answer. 


Argue the following statement, both pro and con. Which side wins the debate? 


| Everything we have done in this entire course has been in preparation for this chapter. 


3B 2B 7B 7B 


This page titled 23.4: Reading Questions is shared under a GNU Free Documentation License 1.3 license and was authored, remixed, and/or 
curated by Thomas W. Judson (Abstract Algebra: Theory and Applications) via source content that was edited to the style and standards of the 
LibreTexts platform; a detailed edit history is available upon request. 


GNU Free Documentation License 23.4.1 https ://math.libretexts.org/@go/page/81229 


Oibretexts: 


23.5: Exercises 


Compute each of the following Galois groups. Which of these field extensions are normal field extensions? If the extension is 
not normal, find a normal extension of Q in which the extension field is contained. 


ee Q(V30)/Q) 
Q(W5 )/Q) 

V2, V3, V5 )/Q 
V2, 1)/Q) 


G(Ql 
G(Q( 
G(AVv2, v2 

G(Q( v6, 7)/Q) 


Determine the separability of each of the following polynomials. 


1.23 +22? 2-2 overQ 
2.24+227+41 over Q 
3.a4+27+1 over Z3 
4.22 +27+1 over Zo 


Give the order and describe a generator of the Galois group of \gf(729) over \gf(9). 


Determine the Galois groups of each of the following polynomials in Q|«]; hence, determine the solvability by radicals of each 
of the polynomials. 


ioe = 123° 8 

2.2° —4a* +227 +2 
3. 2° —5 

4.24 —2? —6 

5. ge +1 

6. (x? — 2)(z? +2) 
fe | 

8.28 +1 

9. 2+ — 327 —10 


Find a primitive element in the splitting field of each of the following polynomials in Q[z]. 


ee 
2° — 8a +15 

ais —15 

4.23 —2 
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Prove that the Galois group of an irreducible quadratic polynomial is isomorphic to Zz. 
Prove that the Galois group of an irreducible cubic polynomial is isomorphic to $3 or Zs. 
Let F CK CE be fields. If £ is a normal extension of F’, show that must also be a normal extension of K. 


Let G be the Galois group of a polynomial of degree n. Prove that |G| divides n!. 


iB :B :B 


Let F C E. If f(z) is solvable over F’, show that f(z) is also solvable over E. 


Construct a polynomial f(x) in Q[z] of degree 7 that is not solvable by radicals. 


Let p be prime. Prove that there exists a polynomial f(x) € Q{] of degree p with Galois group isomorphic to S,. Conclude 
that for each prime p with p > 5 there exists a polynomial of degree p that is not solvable by radicals. 


Let p be a prime and Z,(t) be the field of rational functions over Z,. Prove that f(x) = x? —t is an irreducible polynomial in 
Z,(t)[x]. Show that f(z) is not separable. 


z= 
= 
E 
E 


Let E be an extension field of F’. Suppose that K and L are two intermediate fields. If there exists an element o € G(E/F) 
such that o(A’) = L, then K and L are said to be conjugate fields. Prove that K and L are conjugate if and only if G(E/K) 
and G(£/L) are conjugate subgroups of G(E//F). 


Let o € \aut(R). If a is a positive real number, show that (a) > 0. 


Let K be the splitting field of x? +.” +1 € Z|]. Prove or disprove that K is an extension by radicals. 


Let F be a field such that \chr(F’) #2. Prove that the splitting field of f(x)=ax?+br+c is F(./a), where 
a=? —4ace. 


a 
Ex 
E 
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Prove or disprove: Two different subgroups of a Galois group will have different fixed fields. 


Let K be the splitting field of a polynomial over F’. If E is a field extension of F' contained in K and [E: F] = 2, then E is 
the splitting field of some polynomial in F'[z]. 


We know that the cyclotomic polynomial 


zP—1 & 4 
oo) = ag 2 PE eed 


is irreducible over Q for every prime p. Let w be a zero of ®,(z), and consider the field Q(w). 


1. Show that w, w*,...,w?" are distinct zeros of &,(x), and conclude that they are all the zeros of ®,(z). 
2. Show that G(Q(w)/Q) is abelian of order p — 1. 
3. Show that the fixed field of G(Q(w)/Q) is Q. 


Let F' be a finite field or a field of characteristic zero. Let E be a finite normal extension of F’ with Galois group G(E/F). 
Prove that F CK CLC E if and only if {\identity} C G(E/L) C G(E/K) C G(E/F). 


Let F' be a field of characteristic zero and let f(a) € F'[x] be a separable polynomial of degree n. If E is the splitting field of 
f(x), let ay,..., @, be the roots of f(x) in FE. Let A = [J —a,). We define the discriminant of f(x) to be A?. 


1.If f(z) =2z*+bz +c, show that A? = b? —4c. 

2. If f(z) =a +px +g, show that A? = —4p — 279’. 

3. Prove that A? is in F. 

4. If co € G(E/F) is a transposition of two roots of f(x), show that o(A) = —A. 

5. If o € G(E/F) is an even permutation of the roots of f(x), show that o(A) = A. 
6. Prove that G(E/ F) is isomorphic to a subgroup of A, if and only if A € F’. 

7. Determine the Galois groups of x +22 —4 andz*+z—3. 


i<j (a; 
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23./. Sage 


Again, our competence at examining fields with Sage will allow us to study the main concepts of Galois Theory easily. We will 
thoroughly examine Example 7 carefully using our computational tools. 


Galois Groups 


We will repeat Example 23.25 and analyze carefully the splitting field of the polynomial p(x) = «* — 2. We begin with an initial 
field extension containing at least one root. 


The .galois_closure() method will create an extension containing all of the roots of the defining polynomial of a number 
field. 


From the factorization, it is clear that | is the splitting field of the polynomial, even if the factorization is not pretty. It is easy to 
then obtain the Galois group of this field extension. 


We can examine this group, and identify it. Notice that since the field is a degree 8 extension, the group is described as a 
permutation group on 8 symbols. (It is just a coincidence that the group has 8 elements.) With a paucity of nonabelian groups of 
order 8, it is not hard to guess the nature of the group. 


That's it. But maybe not very satisfying. Let us dig deeper for more understanding. We will start over and create the splitting field 
of p(x) =a*—2 again, but the primary difference is that we will make the roots extremely obvious so we can work more 
carefully with the Galois group and the fixed fields. Along the way, we will see another example of linear algebra enabling certain 
computations. The following construction should be familiar by now. 


The important thing to notice here is that we have arranged the splitting field so that the four roots, a, -a, 6, -b , are very 
1 1 

simple functions of the generators. In more traditional notation, a is27 =W/2, and b is 274 = v/2i (or their negatives). 

We will find it easier to compute in the flattened tower, a now familiar construction. 


We can return to our original polynomial (over the rationals), and ask for its roots in the flattened tower, custom-designed to 
contain these roots. 


Hmmm. Do those look right? If you look back at the factorization obtained in the field constructed with the 
.galois_closure() method, then they look right. But we can do better. 


Yes, those are the roots. 
The End() command will create the group of automorphisms of the field L . 


We can check that each of these automorphisms fixes the rational numbers elementwise. If a field homomorphism fixes 1, then it 
will fix the integers, and thus fix all fractions of integers. 


So each element of G_ fixes the rationals elementwise and thus G_ is the Galois group of the splitting field | over the 
rationals. 


Proposition 23.5 is fundamental. It says every automorphism in the Galois group of a field extension creates a permutation of the 
roots of a polynomial with coefficients in the base field. We have all of those ingredients here. So we will evaluate each 
automorphism of the Galois group at each of the four roots of our polynomial, which in each case should be another root. (We use 
the Sequence() constructor just to get nicely-aligned output.) 


Each row of the output is a list of the roots, but permuted, and so corresponds to a permutation of four objects (the roots). For 
example, the second row shows the second automorphism interchanging a with -a,and b with -b . (Notice that the first 
row is the result of the identity automorphism, so we can mentally comine the first row with any other row to imagine a “two-row” 
form of a permutation.) We can number the roots, 1 through 4, and create each permutation as an element of $4. It is overkill, but 
we can then build the permutation group by letting all of these elements generate a group. 


Notice that we now have built an isomorphism from the Galois group to a group of permutations using just four symbols, rather 
than the eight used previously. 
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Fixed Fields 


In a previous Sage exercise, we computed the fixed fields of single field automorphisms for finite fields. This was “easy” in the 
sense that we could just test every element of the field to see if it was fixed, since the field was finite. Now we have an infinite field 
extension. How are we going to determine which elements are fixed by individual automorphisms, or subgroups of 
automorphisms? 


The answer is to use the vector space structure of the flattened tower. As a degree 8 extension of the rationals, the first 8 powers of 
the primitive element c form a basis when the field is viewed as a vector space with the rationals as the scalars. It is sufficient to 
know how each field automorphism behaves on this basis to fully specify the definition of the automorphism. To wit, 


= uit (c') rationals are fixed 


So we can compute the value of a field automorphism at any linear combination of powers of the primitive element as a linear 
combination of the values of the field automorphism at just the powers of the primitive element. This is known as the “power 
basis”, which we can obtain simply with the .power_basis() method. We will begin with an example of how we can use 
this basis. We will illustrate with the fourth automorphism of the Galois group. Notice that the .vector() method is a 
convenience that strips a linear combination of the powers of c_ into a vector of just the coefficients. (Notice too that 7 is totally 
defined by the value of 7(c), since as a field automorphism t(c*) = (r(c))*. However, we still need to work with the entire power 
basis to exploit the vector space structure.) 


The last line expresses the fact that tau_matrix is a matrix representation of the field automorphism, viewed as a linear 
transformation of the vector space structure. As a representation of an invertible field homomorphism, the matrix is invertible. As 
an order 2 permutation of the roots, the inverse of the matrix is itself. But these facts are just verifications that we have the right 
thing, we are interested in other properties. 


To construct fixed fields, we want to find elements fixed by automorphisms. Continuing with tau from above, we seek elements 
Z (written as vectors) such that tau_matrix*z=z . These are eigenvectors for the eigenvalue 1, or elements of the null 
spaceof (tau_matrix - I) (nullspacesare obtained with .right_kernel() in Sage). 


Each row of the basis matrix is a vector representing an element of the field, specifically 1, c + (1/38)*c4‘5, 
CA2 - (1/22)*c46 , CA3 + (1/278)*C47 . Let's take a closer look at these fixed elements, in terms we recognize. 


Any element fixed by tau will bea linear combination of these four elements. We can ignore any rational multiples present, the 
first element is just saying the rationals are fixed, and the last element is just a product of the middle two. So fundamentally tau 
is fixing rationals, { (which is \/2i) and a2 (which is ./2). Furthermore, 2 = -a/2 (the check follows), so we can 
create any fixed element of tau by just adjoining b =¥/2% to the rationals. So the elements fixed by tau are Q(4/2%). 


Galois Correspondence 


The entire subfield structure of our splitting field is determined by the subgroup structure of the Galois group (Theorem 23.23), 
which is isomorphic to a group we know well. What are the subgroups of our Galois group, expressed as permutation groups? (For 
brevity, we just list the generators of each subgroup.) 


tau above is the fourth element of the automorphism group, and the fourth permutation in elements is the permutation 
(2,3) , the generator (of order 2) for the second subgroup. So as the only nontrivial element of this subgroup, we know that the 


corresponding fixed field is Q(/2%). 


Let us analyze another subgroup of order 2, without all the explanation, and starting with the subgroup. The sixth subgroup is 
generated by the fifth automorphism, so let us determine the elements that are fixed. 


The first element indicates that the rationals are fixed (we knew that). Scaling the second element gives b - a asa fixed 
element. Scaling the third and fourth fixed elements, we recognize that they can be obtained from powers of b - a. 
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So the fixed field of this subgroup can be formed by adjoining 6b - a_ to the rationals, which in mathematical notation is 
V2i — /2 = (1-1) V2, so the fixed field is Q(/2i — ¥/2) = Q((1 —i) 4/2). 

We can create this fixed field, though as created here it is not strictly a subfield of | . We will use an expression for ) - 4 
that is a linear combination of powers of c . 


The .subfield() method returns a pair. The first item is a new number field, isomorphic to a subfield of | . The second 
item is an injective mapping from the new number field into L . In this case, the image of the primitive element cO0_ is the 
element we have specified as the generator of the subfield. The primitive element of the new field will satisfy the defining 
polynomial a* + 8 — you can check that (1 — i)V2 is indeed a root of the polynomial x* + 8. 


There are five subgroups of order 2, we have found fixed fields for two of them. The other three are similar, so it would be a good 
exercise to work through them. Our automorphism group has three subgroups of order 4, and at least one of each possible type 
(cyclic versus non-cyclic). Fixed fields of larger subgroups require that we find elements fixed by all of the automorphisms in the 
subgroup. (We were conveniently ignoring the identity automorphism above.) This will require more computation, but will restrict 
the possibilities (smaller fields) to where it will be easier to deduce a primitive element for each field. 


The seventh subgroup is generated by two elements of order 2 and is composed entirely of elements of order 2 (except the 
identity), so is isomorphic to Zz x Z2,. The permutations correspond to automorphisms number 0, 1, 3, and 6. To determine the 
elements fixed by all four automorphisms, we will build the kernel for each one and as we go, we form the intersection of all four 
kernels. We will work via a loop over the four automorphisms. 


Outside of the rationals, there is a single fixed element. 


Removing a scalar multiple, our primitive element is a/\2 , which mathematically is \/2, so the fixed field is Q(v2). Again, we 
can build this fixed field, but ignore the mapping. 


One more subgroup. The penultimate subgroup has a permutation of order 4 as a generator, so is a cyclic group of order 4. The 
individual permutations of the subgroup correspond to automorphisms 0, 1, 2, 7. 


So we compute the primitive element. 


Since rationals are fixed, we can remove the —14 and the multiple and take a/3*b as the primitive element. Mathematically, 
this is 22, so we might as well use just 2 as the primitive element and the fixed field is Q(z). We can then build the fixed field (and 
ignore the mapping also returned). 


There is one more subgroup of order 4, which we will leave as an exercise to analyze. There are also two trivial subgroups (the 
identity and the full group) which are not very interesting or surprising. 


If the above seems like too much work, you can always just have Sage do it all with the .subfields() method. 


Ten subfields are described, which is what we would expect, given the 10 subgroups of the Galois group. Each begins with a new 
number field that is a subfield. Technically, each is not a subset of | , but the second item returned for each subfield is an 
injective homomorphism, also known generally as an “embedding.” Each embedding describes how a primitive element of the 
subfield translates to an element of | . Some of these primitive elements could be manipulated (as we have done above) to yield 
slightly simpler minimal polynomials, but the results are quite impressive nonetheless. Each item in the list has a third component, 
which is almost always None , except when the subfield is the whole field, and then the third component is an injective 
homomorphism “in the other direction.” 


Normal Extensions 


Consider the third subgroup in the list above, generated by the permutation (1,4) . Asa subgroup of order 2, it only has one 
nontrivial element, which here corresponds to the seventh automorphism. We determine the fixed elements as before. 


As usual, ignoring rational multiples, we see powers of a and recognize that a alone will be a primitive element for the fixed 
field, which is thus Q(v2). Recognize that a was our first root of x* — 2, and was used to create the first part of original tower, 
N .So N is both Q(/2) and the fixed field of H = ((1,4)). 


Q(x/2) contains at least one root of the irreducible z* — 2, but not all of the roots (witness the factorization above) and therefore 
does not qualify as a normal extension. By part (4) of Theorem 23.23 the automorphism group of the extension is not normal in the 
full Galois group. 


As expected. 
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23.8: Sage Exercises 


In the analysis of Example 23.25 with Sage, two subgroups of order 2 and one subgroup of order 4 were not analyzed. 
Determine the fixed fields of these three subgroups. 


Build the splitting field of p(x) = x3? —6x? +12x—10 and then determine the Galois group of p(x) as a concrete group of 
explicit permutations. Build the lattice of subgroups of the Galois group, again using the same explicit permutations. Using the 
Fundamental Theorem of Galois Theory, construct the subfields of the splitting field. Include your supporting documentation 
in your submitted Sage worksheet. Also, submit a written component of this assignment containing a complete layout of the 
subgroups and subfields, written entirely with mathematical notation and with no Sage commands, designed to illustrate the 
correspondence between the two. All you need here is the graphical layout, suitably labeled — the Sage worksheet will 
substantiate your work. 


The polynomial z° — 2 —1 has all of the symmetric group Ss as its Galois group. Because 5 is not solvable, we know this 
polynomial to be an example of a quintic polynomial that is not solvable by radicals. Unfortunately, asking Sage to compute 
this Galois group takes far too long. So this exercise will simulate that experience with a slightly smaller example. 


Consider the polynomial p(x) = x* +2 +1. 


— 


. Build the splitting field of p(x) one root at a time. Create an extension, factor there, discard linear factors, use the 
remaining irreducible factor to extend once more. Repeat until p(a) factors completely. Be sure to do a final extension via 
just a linear factor. This is a little silly, and Sage will seem to ignore your final generator (so you will want to setermine 
what it is equivalent to in terms of the previous gfenerators). Directions below depend on taking this extra step. 

. Factor the original polynomial over the final extension field in the tower. What is boring about this factorization in 
comparison to some other examples we have done? 

. Construct the full tower as an absolute field over Q. From the degree of this extension and the degree of the original 
polynomial, infer the Galois group of the polynomial. 

4. Using the mappings that allow you to translate between the tower and the absolute field (obtained from the 

.Structure() method), choose one of the roots (any one) and express it in terms of the single generator of the 
absolute field. Then reverse the procedure and express the single generator of the absolute field in terms of the roots in the 
tower. 

. Compute the group of automorphisms of the absolute field (but don't display the whole group in what you submit). Take all 
four roots (including your silly one from the last step of the tower construction) and apply each field automorphism to the 
four roots (creating the guaranteed permutations of the roots). Comment on what you see. 

. There is one nontrivial automorphism that has an especially simple form (it is the second one for me) when applied to the 
generator of the absolute field. What does this automorphism do to the roots of p(x)? 

. Consider the extension of Q formed by adjoining just one of the roots. This is a subfield of the splitting field of the 
polynomial, so is the fixed field of a subgroup of the Galois group. Give a simple description of the corresponding 
subgroup using language we typically only apply to permutation groups. 


N 


ice) 


uo 


(o>) 


N 


Return to the splitting field of the quintic discussed in the introduction to the previous problem (a° —a — 1 ). Create the first 

two intermediate fields by adjoining two roots (one at a time). But instead of factoring at each step to get a new irreducible 

polynomial, divide by the linear factor you know is a factor. In general, the quotient might factor further, but in this exercise 

presume it does not. In other words, act as if your quotient by the linear factor is irreducible. If it is not, then the 
NumberField() command should complain (which it will not). 
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After adjoining two roots, create the extension producing a third root, and do the division. You should now have a quadratic 
factor. Assuming the quadratic is irreducible (it is) argue that you have enough evidence to establish the order of the Galois 
group, and hence can determine exactly which group it is. 


You can try to use this quadratic factor to create one more step in the extensions, and you will arrive at the splitting field, as 
can be seen with logic or division. However, this could take a long time to complete (save your work beforehand!). You can try 
passing the check=False argumenttothe NumberField() command — this will bypass checking irreducibility. 


Create the finite field of order 3°, letting Sage supply the default polynomial for its construction. The polynomial 
x +2%+4+22-+1 is irreducible over this finite field. Check that this polynomial splits in the finite field, and then use the 
.roots() method to collect the roots of the polynomial. Get the group of automorphisms of the field with the End( ) 

command. 


You now have all of the pieces to associate each field automorphism with a permutation of the roots. From this, identify the 
Galois group and all of its subgroups. For each subgroup, determine the fixed field. You might find the roots easier to work 
with if you use the .1l0g() method to identify them as powers of the field's multiplicative generator. 


Your Galois group in this example will be abelian. So every subgroup is normal, and hence any extension is also normal. Can 
you extend this example by choosing a nontrivial intermediate field with a nontrivial irreducible polynomial that has all of its 
roots in the intermediate field and a nontrivial irreducible polynomial with none of its roots in the intermediate field? 


Your results here are “typical” in the sense that the particular field or irreducible polynomial makes little difference in the 
qualitative nature of the results. 


The splitting field for the irreducible polynomial p(x) = x’ —7x+3 has degree 168 (hence this is the order of the Galois 
group). This polynomial is derived from an “Elkies trinomial curve,” a hyperelliptic curve (below) that produces polynomials 
with interesting Galois groups: 


y’ =2(81a° +3962" + 7382 + 6602 + 2692 + 48) 


For p(z) the resulting Galois group is PSL(2, 7), a simple group. If SL(2, 7) is all 2 x 2 matrices over Z7 with determinant 
1, then PSL (2, 7) is the quotient by the subgroup { Iz, —Iy}. It is the second-smallest non-abelian simple group (after As). 


See how far you can get in using Sage to build this splitting field. A degree 7 extension will yield one linear factor, and a 
subsequent degree 6 extension will yield two linear factors, leaving a quartic factor. Here is where the computations begin to 
slow down. If we believe that the splitting field has degree 168, then we know that adding a root from this degree 4 factor will 
get us to the splitting field. Creating this extension may be possible computationally, but verifying that the quartic splits into 
linear factors here seems to be infeasible. 


Return to Example 23.25, and the complete list of subfields obtainable from the .subfields() method applied to the 
flattened tower. As mentioned, these are technically not subfields, but do have embeddings into the tower. Given two subfields, 
their respective primitive elements are embedded into the tower, with an image that is a linear combination of powers of the 
primitive element for the tower. 


If one subfield is contained in the other, then the image of the primitive element for the smaller field should be a linear 
combination of the (appropriate) powers of the image of the primitive element for the larger field. This is a linear algebra 
computation that should be possible in the tower, relative to the power basis for the whole tower. 


Write a procedure to determine if two subfields are related by one being a subset of the other. Then use this procedure to create 
the lattice of subfields. The eventual goal would be a graphical display of the lattice, using the existing plotting facilities 
available for lattices, similar to the top half of Figure 23.26. This is a “challenging” exercise, which is code for “it is 
speculative and has not been tested.” 
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